CVE-2024-57681

CVE-2024-57681 affects the D-Link DIR-816A2 router, specifically the component form2alg.cgi in firmware DIR-816A2_FWv1.10CNB05_R1B011D88210. The vulnerability is an access control flaw that allows unauthenticated attackers to configure the device’s agl service via a crafted POST request. The CVSS...

CVE-2024-57680

An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request...

CVE-2024-57680

CVE-2024-57680 concerns a D-Link DIR-816A2 router vulnerability in the form2PortriggerRule.cgi component. The issue is an access control error that allows unauthenticated attackers to set the device port trigger via a crafted POST request to /form2PortriggerRule.cgi, affecting D-Link DIR-816A2_FW...

CVE-2024-57678

An access control issue in the component form2WlAc.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G mac access control list of the device via a crafted POST request...

CVE-2024-57679

An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service of the device via a crafted POST request...

D-Link DIR-816 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control of the formDMZ.cgi component, which can be exploited by an attacker to set up the DMZ service via a specially crafted POST...

CVE-2024-57684

An access control issue in the component formDMZ.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request...

CVE-2024-57683

An access control issue in the component websURLFilterAddDel of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the filter settings of the device via a crafted POST request...

CVE-2024-57682

An information disclosure vulnerability in the component dstatus.asp of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to access sensitive information via a crafted POST request...

CVE-2024-57682

An information disclosure vulnerability in the component dstatus.asp of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to access sensitive information via a crafted POST request...

CVE-2024-57681

An access control issue in the component form2alg.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST request...

CVE-2024-57684

CVE-2024-57684 describes an access-control flaw in the D-Link DIR-816A2 firmware, specifically in the component formDMZ.cgi. The issue allows unauthenticated users to configure the DMZ service via a crafted POST request, enabling potential exposure of internal services. The affected product is D-...

CVE-2024-57679

The CVE-2024-57679 issue affects D-Link DIR-816A2, firmware 1.10CNB05_R1B011D88210, due to an access-control flaw in form2RepeaterSetup.cgi. An unauthenticated attacker can craft a POST request to configure the 2.4G and 5G repeater services. The PT-2025-3537 report additionally notes the conditio...

CVE-2025-0481

A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-0481

CVE-2025-0481 affects D-Link DIR-878 (firmware 1.03). The issue is in an unknown function of the /dllog.cgi HTTP POST Request Handler, leading to information disclosure. It can be exploited remotely, and multiple sources describe public exploits or disclosures. The provided connected documents co...

CVE-2025-0481 D-Link DIR-878 HTTP POST Request dllog.cgi information disclosure

A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-0481 D-Link DIR-878 HTTP POST Request dllog.cgi information disclosure

A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

PT-2025-1265 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.03 Description: A vulnerability has been found in the D-Link DIR-878, affecting an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. This issue leads to information disclosure and can...

CVE-2024-57473

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to...

CVE-2024-57473

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to...