PT-2021-20399

Name of the Vulnerable Software and Affected Versions: D-Link AC2600DIR-2640 version 1.01B04 Description: The issue involves multiple out-of-bounds vulnerabilities in certain processes. These vulnerabilities can elevate ordinary permissions to administrator permissions, leading to local arbitrary...

D-Link AC2600 缓冲区错误漏洞

The D-Link AC2600 is a wireless device from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link AC2600, which originates from multiple out-of-bounds vulnerabilities in the D-Link AC2600 DIR-2640 1.01B04, where normal privileges can be elevated to administrator privileges...

CVE-2021-34204: Insufficiently Protected Credentials

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600DIR-2640 stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all devices are the same, and they cannot be modified by normal users...

CVE-2021-34203: Initialization of a Resource with an Insecure Default

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

D-Link DIR-2640-US 安全漏洞

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to use telnet login, modify routing information, monitor the traffic of all devices under the router, hijack DNS, and phishing attacks...

D-Link DIR-2640-US 安全漏洞

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to easily log in to the target router via a serial port and gain root privileges...

PT-2021-3322

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US version 1.01B04 Description The issue is related to Incorrect Access Control in the D-Link DIR-2640-US router. When setting up PPPoE, the router starts the quagga process, which uses the default password and port, allowing a...

CVE-2021-34202: Out-of-bounds Write

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600DIR-2640 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remo...

The vulnerability of the SetWizardConfig function in D-Link DIR-846 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetWizardConfig function in D-Link DIR-846 router microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request /HNAP1/...

Weak Password Vulnerability in D-Link DIR-600M

The D-Link DIR-600M is a wireless router. A weak password vulnerability exists in D-Link DIR-600M. An attacker can exploit this vulnerability to log into the backend and obtain sensitive information...

D-Link DIR-818LW has a weak password vulnerability

The D-Link DIR-818LW is a wireless router. A weak password vulnerability exists in the D-Link DIR-818LW. An attacker can use the weak password to log into the backend and obtain sensitive information...

Weak password vulnerability in D_Link DIR-850L

The DIR-850L is a wireless AC1200 dual-band Gigabit cloud router. DLink DIR-850L has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

D-Link DIR-895L MFC Information Disclosure Vulnerability

The D-Link DIR-895L MFC is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in DLink DIR-895L MFC v1.21b05, which stems from the fact that DIR-895L MFC v1.21b05 is prone to exposing credentials in the telnet service via decompilation of the...

D-link DIR-885L MFC Information Disclosure Vulnerability

The D-Link DIR-885L MFC is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in the D-link DIR-885L-MFC 1.15b02, v1.21b05, which originates from the DIR-885L-MFC 1.15b02, v1.21b05 is prone to exposing credentials in the telnet service via...

AUO DIR-880L Information Disclosure Vulnerability

The AUO DIR-880L is a wireless AC1900 dual-band Gigabit cloud router. A credential disclosure vulnerability exists in the AUO DIR-880L version 1.07. An attacker can exploit this vulnerability by decompiling the firmware to access the firmware and extract sensitive data...

D-Link DIR-868L Information Disclosure Vulnerability

The D-Link DIR-868L is a wireless AC1750 dual-band Gigabit cloud router. A credential disclosure vulnerability exists in the D-Link DIR-868L version 3.01. An attacker can exploit this vulnerability by decompiling the firmware to access the firmware and extract sensitive data...

CVE-2020-29324

The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

CVE-2020-29321

The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

CVE-2020-29322

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

CVE-2020-29321

The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...