9826 matches found
CVE-2022-37130
In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...
CVE-2022-37129
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
CVE-2022-36619
In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...
CVE-2022-36619
In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...
CVE-2022-37123
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...
CVE-2022-37130
In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...
CVE-2022-37129
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
CVE-2022-37130
In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...
Command injection
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
Authentication flaw
In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...
CVE-2022-37123
CVE-2022-37123 affects the D-Link DIR-816 DIR-816 A2 firmware 1.10CNB04. The issue is a command-injection vulnerability in the /goform/form2userconfig.cgi API endpoint, enabling potential remote code execution with high impact to confidentiality, integrity, and availability as reflected by the CV...
CVE-2022-37123
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...
CVE-2022-36619
In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...
CVE-2022-36619
CVE-2022-36619 affects D-Link DIR-816 DIR-816 firmware A2_v1.10CNB04.img. The vulnerability, rooted in the /goform/setMAC endpoint, allows an unauthenticated reset of the device over the network. Reported impact aligns with high severity (CVSS 3.1: Network, no user interaction, availability impac...
CVE-2022-37129
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
CVE-2022-37129
CVE-2022-37129 affects the D-Link DIR-816 A2 with firmware version 1.10CNB04. The vulnerability is a remote command injection via the HTTP endpoint /goform/SystemCommand . User-supplied parameter “command” is spliced into a local buffer (byte_4836B0) using snprintf and then executed through a cal...
CVE-2022-37125
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
CVE-2022-37125
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...