Default credentials

An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234...

Design/Logic Flaw

An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal...

CVE-2016-10179

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

CVE-2016-10177

An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234...

CVE-2016-10183

An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal...

CVE-2016-10186

An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules...

Design/Logic Flaw

An issue was discovered on the D-Link DWR-932B router. A securemode=no line exists in /var/miniupnpd.conf...

CVE-2016-10184

An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal...

Cross site scripting

An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal...

CVE-2016-10186

An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules...

CVE-2016-10182

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with characters...

Design/Logic Flaw

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

CVE-2016-10184

An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal...

CVE-2016-10181

An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=gethomeCfg requests...

CVE-2016-10182

The CVE-2016-10182 entry concerns the D-Link DWR-932B router. A vulnerability in the qmiweb interface allows command injection via the backtick character, enabling remote execution. The issue is documented with a high severity (CVSS v3.1 base score 9.8) and network attack vector, with no public r...

CVE-2016-10185

An issue was discovered on the D-Link DWR-932B router. A securemode=no line exists in /var/miniupnpd.conf...

CVE-2016-10181

The CVE affects the D-Link DWR-932B router. A information disclosure vulnerability exists where qmiweb exposes sensitive information for CfgType=get_homeCfg requests. Connected CNVD entry confirms the issue on DWR-932B and notes firmware version 02.02eu as affected; the NVD entry defines the impa...

CVE-2016-10186

CVE-2016-10186 affects the D-Link DWR-932B router. The issue is that "/var/miniupnpd.conf" has no deny rules, potentially enabling unintended access through UPnP services. The provided metrics indicate a high integrity impact (CVSS 3.1) with network-based, low-complexity access and no authenticat...

CVE-2016-10182

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with characters...

CVE-2016-10179

The CVE-2016-10179 entry affects the D-Link DWR-932B router. Multiple sources confirm a hardcoded WPS PIN (28296607) in the device, enabling authentication bypass and potentially unauthorized operations. CNVD-2017-01663 specifically notes exploitation on firmware 02.02eu, and CNVD describes bypas...