CVE-2023-32151

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing...

CVE-2023-32151

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing...

CVE-2023-32151: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing...

D-Link DIR-2640 security vulnerabilities

The D-Link DIR-2640 is a high-power Wi-Fi router from Taiwan, China's AUO D-Link that supports the AC2600 WiFi standard with dual-band 2.4GHz and 5GHz network transmission. The D-Link DIR-2640 suffers from a command injection vulnerability, which stems from the DestNetwork command injection remot...

D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

CVE-2019-8317

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8317: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

PT-2019-1621

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description An issue allows a remote attacker to execute arbitrary code and get a root shell through a Command Injection vulnerability. This occurs when any HNAP API function triggers a call to the system function...