CVE-2022-42999: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the pskValue parameter of the setSecurity function...

CVE-2022-43000

Affected product: D-Link DIR-816 A2 router (firmware 1.10 B05). Vulnerability: stack overflow in the /goform/form2WizardStep4 handler, triggered via the wizardstep4_pskpwd parameter. Root cause: improper handling in wizardstep4_pskpwd processing leading to potential memory corruption. Impact: hig...

CVE-2022-42998: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

PT-2022-5272 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the D-Link DIR-816 A2 router's firmware, which can be triggered via the srcip parameter at the "/goform/form2IPQoSTcAdd" API endpoint. This can...

CVE-2022-42998

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

CVE-2022-42999

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the wizardstep54pskpwd parameter of /goform/form2WizardStep54...

CVE-2022-43002

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54pskpwd parameter at /goform/form2WizardStep54...

CVE-2022-43003

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function...

PT-2022-5268 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the setSecurity function, specifically via the pskValue parameter. This can potentially allow a remote attacker to execute arbitrary code due to a...

CVE-2022-43001

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the wizardstep4pskpwd parameter of /goform/form2WizardStep4...

PT-2022-5273 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a buffer overflow in the setRepeaterSecurity function of the D-Link DIR-816 A2 router's firmware. This can be exploited by a remote attacker using the pskValue parameter ...

CVE-2022-43003: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function...

CVE-2022-43000: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4pskpwd parameter at /goform/form2WizardStep4...

PT-2022-5677 · D Link · D-Link Dir-3060

Name of the Vulnerable Software and Affected Versions: D-Link DIR3060 version DIR3060A1 FW111B04.bin Description: The issue is related to a buffer overflow in the D-Link DIR-3060 router's firmware. Specifically, the FUN 0049ac18 function is vulnerable due to the lack of size checking for input...

D-Link DIR-878 操作系统命令注入漏洞

The D-Link DIR-878 is a wireless router from China-based AUO D-Link. An operating system command injection vulnerability exists in the D-Link DIR-878 version 1.30B08 Hotfix 04, which originates from a command injection in the component /bin/proc.cgi...

PT-2022-5567 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2 Description: The issue is related to the implementation of the SetNetworkTomographySettings function in the D-Link DIR-823G router's firmware, which is associated with insufficient input data sanitization used in...

The vulnerability of the Lighttpd microprogramming software library in routers from D-LINK models DIR-867, DIR-878, and DIR-882-US allows a hacker to execute arbitrary code.

The vulnerability of the Lighttpd microprogramming software-based router libraries from D-LINK models DIR-867, DIR-878, and DIR-882-US stems from buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTTP request se...