CVE-2022-36570

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg...

CVE-2022-36568

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList...

CVE-2022-36568

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList...

Stack overflow

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg...

CVE-2022-36571

CVE-2022-36571 affects Tenda AC9 firmware v15.03.05.19, where a stack overflow can be triggered by the mask parameter in the /goform/WanParameterSetting endpoint. The issue arises from how the mask parameter is processed, leading to potential overflow. Multiple sources corroborate the description...

CVE-2022-36570

CVE-2022-36570 is a stack overflow affecting Tenda AC9 firmware v15.03.05.19, triggered by the time parameter in the /goform/SetLEDCfg endpoint. The vulnerability is explicitly described as a stack overflow, with CVSS v3.1 scores/impact indicating high impact on confidentiality, integrity, and av...

CVE-2022-36569

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg...

CVE-2022-36568

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList...

CVE-2022-37125: Improper Neutralization of Special Elements used in a Command

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

D-Link DIR-816 访问控制错误漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 firmware A2v1.10CNB04.img image, which stems from its /goform/setMAC component that allows an attacker to reset the network without authentication...

CVE-2022-36571: Out-of-bounds Write

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting...

CVE-2022-37128: Improper Initialization

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-36569: Out-of-bounds Write

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from susceptibility to a command injection attack via /goform/SystemCommand, where the user passes in command parameters...

CVE-2022-37123: Improper Neutralization of Special Elements used in an OS Command

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

CVE-2022-37129: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/form2userconfig.cgi...

CVE-2022-36568: Out-of-bounds Write

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList...

PT-2022-23826 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: The issue is related to Command Injection via the "/goform/SystemCommand" API endpoint. When a user passes in the command parameter, it is spliced into byte 4836B0 by snprintf, and then...

PT-2022-23823 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue is related to command injection via the "/goform/form2userconfig.cgi" API endpoint. This allows for potential exploitation. Recommendations: For version 1.10CNB04, consider disabling...