9788 matches found
Information disclosure
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...
Information disclosure
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...
Command injection
D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection...
CVE-2020-13782
CVE-2020-13782 affects D-Link DIR-865L Ax, firmware 1.20B01 Beta. The flaw is a command injection vulnerability in the router’s web interface, centered on the cgibin.exe controller. A crafted request (e.g., to scandir.sgi) can cause arbitrary code execution with administrative privileges. The thr...
CVE-2020-13783
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...
CVE-2020-13783
CVE-2020-13783 affects the D-Link DIR-865L Ax firmware 1.20B01 Beta. The root cause is cleartext storage of sensitive information in the device, enabling information disclosure if storage is accessed. Multiple sources (CNVD, Red Hat) classify this as an information disclosure vulnerability. No re...
CVE-2020-13784
CVE-2020-13784 concerns the D-Link DIR-865L Ax router with firmware 1.20B01 Beta, where the pseudo-random number generator uses a predictable seed. The connected CNVD entry confirms a security feature issue vulnerability for the same device/firmware, citing the easily guessable PRNG seed as the u...
CVE-2020-13784
D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...
CVE-2020-13785
CVE-2020-13785 affects D-Link DIR-865L Ax with firmware 1.20B01 Beta. The vulnerability is described as Inadequate Encryption Strength in the device’s SharePort/Web access context, impacting confidentiality. Affected version is explicitly 1.20B01 Beta; CVSS v3.1 base score is 7.5 (HIGH). Connecte...
CVE-2020-13785
D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...
CVE-2020-13786
CVE-2020-13786 refers to a CSRF vulnerability in D-Link DIR-865L Ax, version 1.20B01 Beta. Root cause per CNVD: failure to properly validate user input in the router’s web interface, enabling cross-site requests to perform unauthorized operations. Related material notes a possible path for sessio...
CVE-2020-13786
D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...
CVE-2020-13787
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...
CVE-2020-13787
CVE-2020-13787 affects D-Link DIR-865L Ax devices with firmware 1.20B01 Beta, where sensitive information can be disclosed due to cleartext transmission over the network. The connected sources describe an information-disclosure vulnerability and a potential for attackers to sniff traffic to obtai...
CVE-2020-13785: Inadequate Encryption Strength
D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...
CVE-2020-13783: Cleartext Storage of Sensitive Information
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...
PT-2020-2910 · D Link · D-Link Dir-865L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L versions 1.20B01 Description: The issue is related to inadequate encryption strength in the SharePort Web Access component of the D-Link DIR-865L router's firmware. This could allow a remote attacker to bypass existing securit...
CVE-2020-13782: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection...