171 matches found
Design/Logic Flaw
D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...
CVE-2012-6613
CVE-2012-6613 affects D-Link DSR-250N devices with firmware 1.05B73_WW. The issue allows Persistent Root Access due to the admin password for the admin account. Attack surface is network-exposed since CVSS vectors indicate remote access with low complexity and high privileges required. The NVD en...
CVE-2012-6613
D-Link DSR-250N devices with firmware 1.05B73WW allow Persistent Root Access because of the admin password for the admin account...
BlockDev Sp. Z o.o: Steal collateral during `end` process, by earning DSR interest after `flow`.
Summary: The end contract in MCD controls the process of shutting down the MCD contracts and allowing for users to redeem their DAI for collateral -- presumably to migrate to a new implementation of DAI. The process, however, doesn't prevent the continued functioniong of DAI savings accounts pot...
BlockDev Sp. Z o.o: Earn free DAI interest (inflation) through instant CDP+DSR in one tx
Summary: The MCD contracts contain different mechanisms for accumulating rates in different contracts, namely pot and jug corresponding to the cost of a loan and interest earned on savings. Because these rates are not synchronised, and depend on the call to the drip method to be calculated, it's...
CVE-2019-2399
The CVE-2019-2399 entry affects Oracle Communications Applications’ Communications Diameter Signaling Router (DSR) security subcomponent. Affected: DSRs prior to version 8.3. Root cause described as an access control issue that permits an unauthenticated, network-based attacker (via HTTP) to read...
The vulnerability of the D-Link DSR-500 router’s microprogramming software allows a malicious individual to gain administrator privileges.
The D-Link DSR-500 router has a pre-installed user with administrator privileges...
The vulnerability of the microprogrammed software of the D–Link DSR–250 router allows a malicious individual to intercept network traffic.
The microprogrammed software of the D-Link DSR-250 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...
The vulnerability of the D-Link DSR-150 router’s microprogramming software allows a malicious individual to gain administrator privileges.
The script “/scgi-bin/platform.cgi” of the D–Link DSR–150 router’s software does not properly filter the data entered by the user in the “Password” field. As a result, a malicious individual can bypass the authentication process and gain access to the device with administrator privileges...
The vulnerability of the microprogrammed software of the D–Link DSR–150 router allows a malicious individual to intercept network traffic.
The microprogrammed software of the D-Link DSR-150 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...
The vulnerability of the microprogrammed routing software of the D–Link DSR–1000 allows a malicious actor to intercept network traffic.
The microprogrammed software of the D-Link DSR-1000 router does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to intercept network traffic.
The D-Link DSR-500 router’s microprogramming software does not perform ARP packet authentication for packets transmitted over the IPv4 protocol. This allows for intercepting the traffic processed by this router through ARP spoofing attacks...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to execute arbitrary system commands.
The web interface of the router allows for the execution of a limited number of system commands ping, traceroute, dnslookup. However, it is possible to execute any command that is separated by a system separator from the allowed commands...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain access to user account information.
In the file system of the D–Link DSR–500 router, user passwords are stored publicly in the file /tmp/teamf1.cfg.ascii...
The vulnerability of the microprogrammed software of the D–Link DSR–500 router allows a malicious individual to gain administrator privileges.
The script “/scgi-bin/platform.cgi” of the D–Link DSR–500 router’s software does not properly filter the data entered by the user in the “Password” field. As a result, a malicious individual can bypass the authentication process and gain access to the device with administrator privileges...
The vulnerability of the microprogrammed routing software D–Link DSR–1000, which allows a malicious individual to gain administrator privileges
The script “/scgi-bin/platform.cgi” of the D–Link DSR–1000 router’s software does not filter the data entered by the user in the “Password” field properly. As a result, a malicious individual can bypass the authentication process and gain access to the device with administrator privileges...
D-Link DSR Router Series - Remote Root Shell Exploit
No description provided by source. !/usr/bin/python CVEs: CVE-2013-5945 - Authentication Bypass by SQL-Injection CVE-2013-5946 - Privilege Escalation by Arbitrary Command Execution Vulnerable Routers: D-Link DSR-150 Firmware v1.08B44 D-Link DSR-150N Firmware v1.05B64 D-Link DSR-250 and DSR-250N...
D-Link DSR Router Series SQL Injection Vulnerability
D-Link DSR Router Series are prone to an SQL-injection vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-5946
The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute...
Design/Logic Flaw
The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute...