CVE-2023-50206

This CVE affects D-Link G416 routers. The flaw lies in the HTTP service (port 80) where unvalidated user input is used to construct a system call, enabling network-adjacent attackers to execute arbitrary code with root privileges. Reported as a command-injection/RCE vulnerability; authentication ...

CVE-2023-50205

The CVE-2023-50205 issue affects D-Link G416 routers, specifically the awsfile chmod command path in the HTTP service on port 80. The vulnerability stems from insufficient validation of a user-supplied string used to invoke a system call, enabling remote code execution with root privileges by an ...

CVE-2023-50206 D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl querytype edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-50204 D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-50204

CVE-2023-50204 describes a command-injection remote code execution in the D-Link G416 wireless router. The flaw resides in the HTTP service (TCP port 80) and stems from insufficient validation of a user-supplied string used to perform a system call, allowing network-adjacent attackers to execute ...

CVE-2023-50204 D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-50202 D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specif...

CVE-2023-50202 D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specif...

CVE-2023-50202

CVE-2023-50202 affects the D-Link G416 flupl pythonmodules component. The issue is a command injection in the HTTP service on port 80 caused by improper validation of a user-supplied string before executing a system call, allowing network-adjacent attackers to execute code with root privileges. T...

CVE-2023-50203

CVE-2023-50203 – D-Link G416 : A command injection exists in the router’s nodered chmod function, exploitable via HTTP (port 80) with no authentication. The flaw validates a user-supplied string poorly, allowing an attacker to execute code as root on affected devices. Multiple sources (ZDI adviso...

CVE-2023-50203 D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50201 D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50201

D-Link G416: remote code execution via cfgsave upusb command injection in the HTTP service (port 80). Root context achieved by abusing insufficient validation of a user-supplied string to execute a system call. Affected product is the D-Link G416 router; attack vector is network-adjacent with no ...

CVE-2023-50201 D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50200

CVE-2023-50200 corresponds to a D-Link G416 router vulnerability in the HTTP service (port 80) where the cfgsave backusb function fails to validate user input before executing a system call, enabling network-adjacent attackers to achieve remote code execution as root with no authentication. Multi...

CVE-2023-50200 D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2023-50200 D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2023-50198 D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2023-50198 D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2023-50199

Summary: CVE-2023-50199 affects D-Link G416 routers, due to a flaw in the httpd service listening on TCP port 80 that allows missing authentication to access a critical function, enabling remote code execution by network-adjacent attackers. The entry is supported by multiple sources (ZDI advisory...