Lucene search
+L

13 matches found

CNVD
CNVD
•added 2021/11/25 12:00 a.m.•55 views

D-Link DWR-932C E1 Command Injection Vulnerability

The D-Link Dwr-932C E1 is a WiFi mobile modem router from China-based D-Link.A security vulnerability exists in the D-Link DWR-932C E1 firmware, which stems from an OS command injection in debugfcgi. An attacker could exploit this vulnerability to perform command injection via a crafted HTTP...

10CVSS1.9AI score0.07125EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•44 views

D-Link DWR-932C E1 has unspecified vulnerabilities

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

10CVSS4.9AI score0.03917EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/23 10:15 p.m.•27 views

CVE-2021-42784

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS0.07125EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/23 10:15 p.m.•21 views

Authentication flaw

Missing Authentication for Critical Function vulnerability in debugpostset.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions...

10CVSS9.6AI score0.03917EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/11/23 10:15 p.m.•31 views

Command injection

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS9.7AI score0.07125EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/11/23 9:37 p.m.•65 views

CVE-2021-42783

The CVE-2021-42783 issue affects the D-Link DWR-932C E1 firmware, where a Missing Authentication for Critical Function in debug_post_set.cgi enables an unauthenticated attacker to perform administrative actions. The vulnerability is documented with a high-severity CVSS score (3.1: 9.8; 2.0: 10.0)...

10CVSS9.8AI score0.03917EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/23 9:37 p.m.•32 views

CVE-2021-42784 OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

9.9AI score0.07125EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/23 9:37 p.m.•68 views

CVE-2021-42784

CVE-2021-42784 describes an OS command injection in the debug_fcgi component of the D-Link DWR-932C E1 firmware. A remote attacker could exploit a crafted HTTP request to execute commands on the device, with high impact across confidentiality, integrity, and availability per CVSS 3.1/3.0 scores i...

10CVSS9.8AI score0.07125EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•18 views

D-Link Dwr-932C E1 访问控制错误漏洞

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

10CVSS5.7AI score0.03917EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•4 views

CVE-2021-42783: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in debugpostset.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions...

10CVSS6.1AI score0.03917EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•3 views

CVE-2021-42784: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS6AI score0.07125EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•4 views

PT-2021-4870

Name of the Vulnerable Software and Affected Versions D-Link DWR-932C E1 firmware affected versions not specified Description The issue is related to an OS Command Injection vulnerability in the debug fcgi component of the D-Link DWR-932C E1 firmware. This vulnerability allows a remote attacker t...

10CVSS0.07125EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•5 views

PT-2021-4990

Name of the Vulnerable Software and Affected Versions D-Link DWR-932C E1 firmware affected versions not specified Description The issue is related to a Missing Authentication for Critical Function vulnerability in the debug post set.cgi component of the D-Link DWR-932C E1 firmware. This...

10CVSS0.03917EPSS
SaveExploits0References7
Rows per page
Query Builder