D-Link DAP-2020 - webproc File Read (CVE-2021-27250)

Reads arbitrary files from D-Link DAP-2020 via POST /cgi-bin/webproc errorpage= parameter CVE-2021-27250. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DAP-2020 webproc errorpage arbitrary file read CVE-2021-27250.""" from kittysploit import from lib.protocols.http.httpclient import...

D-Link DAP-2020 - webproc File Read Detection (CVE-2021-27250)

Detects CVE-2021-27250 by POSTing to /cgi-bin/webproc with errorpage=/etc/passwd and looking for passwd contents in the response. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DAP-2020 webproc errorpage path traversal CVE-2021-27250.""" import re from kittysploit import from...

CVE-2021-27250

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When...

CVE-2021-27249

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. The issue result...

CVE-2021-27248

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the...

EUVD-2021-14013

Malware in sbrugna...

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

CVE-2021-34862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

D-Link DAP-1360 Rev. F / DAP-2020 Rev. A2 Devices Multiple Vulnerabilities

D-Link DAP-1360 Rev. F and DAP-2020 Rev. A2 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

D-Link webproc script Code Execution

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

D-Link Wireless Access Point Code Execution

The vulnerability of the WEBDisplayPage function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

D-Link webproc script Code Execution

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link Wireless Access Point Code Execution

The vulnerability of the UPGCGICheckAuth function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

D-Link DAP-2020 Wireless Access Point Request Handler Code Execution

The vulnerability of the request processor/cgi-bin/webproc in wireless access points from D-Link, models DAP-2020 and DAP-1360, relates to the possibility of buffer overflow based on a stack mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

D-Link DAP-2020 Code Execution

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points’ microprogramming software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

D-Link Wireless Access Point Code Execution

The vulnerability of the WEBDisplayPage function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

D-Link Wireless Access Point Buffer Overflow

The vulnerability of the microprogrammed software of D-Link’s DAP-2020 and DAP-1360 wireless access points is related to buffer overflow when processing the var:page parameter of the webproc module. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

D-Link DAP-2020 Code Execution

The vulnerability of the microprogrammed software of D-Link’s DAP-2020 and DAP-1360 wireless access points is related to buffer overflow during the processing of the var:menu parameter at the webproc end point. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

D-Link DAP-2020 Code Execution

The vulnerability of D-Link DAP-2020 and DAP-1360 wireless access points’ microprogramming software is related to buffer overflow attacks on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

D-Link Wireless Access Point Code Execution

The vulnerability of the UPGCGICheckAuth function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to numerical truncation errors during the processing of the binary file webupg. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...