645 matches found
CVE-2016-10180
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...
CVE-2016-10178
An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 UDP launches the "/sbin/telnetd -l /bin/sh" command...
CVE-2016-10177
CVE-2016-10177 affects the D-Link DWR-932B router. Multiple sources (NVD, CNVD, CVE records) describe a vulnerability where undocumented TELNET and SSH services enable logins using credentials admin/admin for admin and root/1234 for root. Root cause: presence of open/undocumented login interfaces...
CVE-2016-10177
An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234...
CVE-2016-10178
The D-Link DWR-932B router is affected by CVE-2016-10178. A vulnerability in the device allows a remote attacker to trigger a shell with /sbin/telnetd -l /bin/sh via HELODBG on UDP port 39889, effectively enabling remote command execution. The CNVD entry describes input validation issues enabling...
CVE-2016-10184
An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal...
CVE-2016-10185
The connected CNVD entry for CVE-2016-10185 (D-Link DWR-932B) documents a vulnerability in /var/miniupnpd.conf where secure_mode=no can be set, enabling remote attackers to bypass security restrictions and perform unauthorized operations on the DWR-932B router. No explicit exploit details, affect...
CVE-2016-10183
The CVE-2016-10183 issue affects the D-Link DWR-932B router, caused by a directory traversal in the qmiweb component that allows listing directory contents via ../ traversal. Public records (NVD, CNVD, CVE lists) confirm the affected device and vector but do not provide concrete firmware versions...
CVE-2016-10184
CVE-2016-10184 affects the D-Link DWR-932B router. The qmiweb component enables arbitrary file reading via directory traversal ("..%2f"), allowing read access to files on the device. This aligns with the CVSS details: Confidentiality impact is PARTIAL, with no integrity or availability impact rep...
CVE-2016-10183
An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal...
CVE-2016-10180
CVE-2016-10180 affects the D-Link DWR-932B router. The WPS PIN generation is based on srand(time(0)) seeding, enabling potential PIN predictability. Connected sources confirm the issue and link to multiple entries, with no publicly documented patch/version details in the provided documents. Pract...
CVE-2016-10180
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...
PT-2017-7787 · D Link · Dwr-932B
Name of the Vulnerable Software and Affected Versions: D-Link DWR-932B router affected versions not specified Description: An issue was discovered where WPS PIN generation is based on srandtime0 seeding. This indicates a potential predictability in the PIN generation process, which could be...
Unauthorized Access Vulnerability in D-Link DWR-932B LET Router WPS System
The D-Link DWR-932B LET is a wireless router. An unauthorized access vulnerability exists in the WPS system of the D-Link DWR-932B LET router. Since the WPS system PIN is hardcoded into the /bin/appmgr program, an attacker can exploit the vulnerability to use the PIN to access the wireless networ...
D-Link DWR-932B LTE router found multiple Backdoor-vulnerability warning-the black bar safety net
! If you have a similar to the DWR-9 3 2 B LTE D-Link router, don't wait for it to slow a firmware upgrade, or directly to give it is better. Allegedly the D-Link DWR-9 3 2 B LTE has more than 2 0 at risk, including Backdoor accounts, the default certificate, leakage of certificate, the firmware...
Dlink DWR-932B router is explosion multiple security vulnerabilities-vulnerability warning-the black bar safety net
Foreword According to security experts the latest discovery, the Dlink DWR-932B router in the presence of a large number of security vulnerabilities, including back doors, the back door account, the weak WPS, as well as a remote code execution vulnerability and so on. If you're on IOT Security...
D-Link DWR-932B Backdoors / Default WPS PIN
D-Link DWR-932B suffers from backdoor accounts, default WPS PIN, weak WPS PIN generation, and various other bad security practices and issues. Advisory Information Title: Multiple vulnerabilities found in the Dlink DWR-932B backdoor, backdoor accounts, weak WPS, RCE ... Advisory URL:...
CVE-2016-3688
SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the c0-e3 parameter to dwr/call/plaincall/UserAjax.getUsersList.dwr...
