3434 matches found
CVE-2022-37130: Improper Neutralization of Special Elements used in an OS Command
In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...
CVE-2022-36620: Improper Validation of Specified Quantity in Input
D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 firmware A2v1.10CNB04.img image, which originates from a buffer overflow in its /goform/addRouting component...
PT-2022-23478 · Tenda · Tenda Ac9
Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.19 Description: A stack overflow issue was discovered, which can be triggered via the mask parameter at the "/goform/WanParameterSetting" API endpoint. Recommendations: For Tenda AC9 version 15.03.05.19, avoid using...
CVE-2022-36570: Out-of-bounds Write
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg...
PT-2022-23513 · D Link · D-Link Dir-816 +1
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04 D-link DIR-878 version DIR 878 FW1.30B08.img Description: The issue is related to a Buffer Overflow that can be triggered via the "/goform/addRouting" API endpoint. This allows for potential exploitation...
CVE-2022-36619: Missing Authentication for Critical Function
In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...
D-Link DIR-816 操作系统命令注入漏洞
The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/Diagnosis, where setnum is spliced and then executed after the...
PT-2022-23856 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6AC1200 v5.0 Firmware versions v02.03.01.114 and below Description: The issue allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to "goform/setWizard". This enables...
CVE-2022-37176: Undefined Security Weakness
Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6 AC1200 v5.0 Firmware version v02.03.01.114 and prior versions. An attacker can exploit this vulnerability by removing the Wi-Fi password and forcing the device into open security mode via a specially...
CVE-2022-37292: Out-of-bounds Write
Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...
CVE-2022-37133
D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the mirrored version of the D-Link DIR-816 firmware A2v1.10CNB04.img, which stems from a reboot that will be executed when the function finally returns and does not require authentication by th...
CVE-2022-37133: Improper Resource Shutdown or Release
D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...
PT-2022-23829 · D Link · Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue allows the router to reboot without authentication via the "/goform/doReboot" API endpoint. No authentication is required, and the reboot is executed when the function returns at the end...
CVE-2022-37134: Improper Validation of Specified Quantity in Input
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...
PT-2022-23830 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04.img Description: The issue arises from a Buffer Overflow vulnerability via the /goform/form2Wan.cgi endpoint. When wantype is 3, the l2tp usrname will be decrypted by base64, and the result will be stored ...
