EUVD-2019-6512

Malware in sbrugna...

Command injection

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...

PT-2019-14247

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This issue occurs due to shell metacharacters in the MaxIdTime field when using the...

CVE-2019-15527: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...