D-Link DIR-880L - Multiple Buffer Overflow Vulnerabilities

Advisory Information Title: DIR-880L Buffer overflows in authenticatio and HNAP functionalities. Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendor indicated that they have fixed...

D-Link DIR-890L/R - Multiple Buffer Overflow Vulnerabilities

Advisory Information Title: DIR-890L/R Buffer overflows in authentication and HNAP functionalities. Date published: July,17th, 2015 Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been discussed with the vendor and vendo...

D-Link DIR-817LW - Multiple Vulnerabilities

D-Link DIR-817LW - Multiple Vulnerabilities Advisory Information Title: DIR-817LW Buffer overflows and Command injection in authentication and HNAP functionalities Vendors contacted: William Brown , Patrick Cline [email protected] CVE: None Note: All these security issues have been...

D-link DIR-890L HNAP 未授权信息泄漏漏洞

HNAPHome Network Administration Protocol,家庭网络管理协议是一种基于SOAPSimple Object Access Protocol,简单对象管理协议的协议，和UPnP很像，通常被D-Link的”EZ”设置程序用来初始化设置路由器。 存在问题代码： / Grab a pointer to the SOAPAction header / SOAPAction = getenv"HTTPSOAPACTION"; / Skip authentication if the SOAPAction header contains...

D-link DIR-645 Command Injection - Buffer Overflow Exploit

Exploit for hardware platform in category web applications Exploit Title: DIR-645 D-link Command Injection - Buffer Overflow Type: Command Injection - Buffer Overflow Date: 22/07/2015 Exploit Author: DNO Version: DIR-645 FW 1.04b12 Tested on: linux "ubuntu" CVE : N/A...

hnap-info NSE Script

Retrieve hardwares details and configuration information utilizing HNAP, the "Home Network Administration Protocol". It is an HTTP-Simple Object Access Protocol SOAP-based protocol which allows for remote topology discovery, configuration, and management of devices routers, cameras, PCs, NAS, etc...

D-Link Router HNAP GetDeviceSettings Remote Command Execution

The remote D-Link device is affected by a remote command execution vulnerability due to a flaw in the GetDeviceSettings functionality of the HNAP Home Network Administration Protocol server. A remote attacker can exploit this, via a crafted SOAPAction header, to bypass authentication and inject...

D-Link Devices HNAP SOAPAction-Header Command Execution Exploit

Different D-Link Routers are vulnerable to OS command injection in the HNAP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This Metasploit module has been tested on a DIR-645 device. The following devices are also reported as...

D-Link Devices HNAP SOAPAction-Header Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link Devices HNAP SOAPAction-Header Command Execution', 'Description' = %q Different D-Link Routers are vulnerable to OS command...

D-Link Devices - HNAP SOAPAction-Header Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link Devices HNAP SOAPAction-Header Command Execution', 'Description' = %q Different D-Link Routers are vulnerable to OS command...

D-Link Devices HNAP SOAPAction-Header Command Execution

Different D-Link Routers are vulnerable to OS command injection in the HNAP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This module has been tested on a DIR-645 device. The following devices are also reported as affected:...

D-Link DIR-645 Wired/Wireless Router OS Command Injection Vulnerability

The D-Link DIR-645 is an adjustable wireless transmit power router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-645 Wired/Wireless Router Rev. Ax. A remote attacker can exploit this vulnerability to execute arbitrary code by performing a GetDeviceSettings operation o...

D-Link DIR-645 Wired/Wireless Router Stack Buffer Overflow Vulnerability

The D-Link DIR-645 is an adjustable wireless transmit power router product from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-645 Wired/Wireless Router Rev. Ax. The vulnerability can be exploited by a remote attacker to execute arbitrary code with the help of a very...

CVE-2015-2052

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface...

CVE-2015-2051

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface...

Stack overflow

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface...

Design/Logic Flaw

The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface...

EUVD-2015-2165

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface...

CVE-2015-2052

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long string in a GetDeviceSettings action to the HNAP interface...

CVE-2015-2052

Affected : D-Link DIR-645 Wired/Wireless Router Rev. Ax, firmware 1.04b12 and earlier. Vulnerability : stack-based buffer overflow in the HNAP GetDeviceSettings action allows remote attackers to execute arbitrary code via a long string. Impact : remote code execution with full confidentiality, in...