D-Link DIR-2640 security vulnerabilities

The D-Link DIR-2640 is a high power Wi-Fi router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-2640 that stems from a HNAP PrivateLogin authentication bypass vulnerability...

CVE-2020-25368

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login...

PT-2021-11131

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version V1.0.2B05 Description: A command injection vulnerability was discovered in the HNAP1 protocol. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login...

D-Link HNAP Private Login Component Privilege Escalation

The vulnerability of the HNAP Private Login component of D-Link’s wireless router products, namely D-Link DIR-867-US, D-Link DIR-878, and D-Link DIR-882-US, is related to errors in the implementation of the authentication algorithm. Exploiting this vulnerability could allow an attacker to remotel...

PT-2020-1849

Name of the Vulnerable Software and Affected Versions D-Link DIR-867 versions 1.10B04 D-Link DIR-878 versions 1.10B04 D-Link DIR-882 versions 1.10B04 Description The issue is related to errors in the implementation of the authentication algorithm in the HNAP Private Login component of the D-Link...