Lucene search
K

284 matches found

CNNVD
CNNVD
added 2024/04/26 12:0 a.m.1 views

D-Link DIR-822 安全漏洞

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the SetPlcNetworkpwd function of prog.cgi, allowing remote attackers to execute arbitrary commands via...

7.5CVSS8.2AI score0.00518EPSS
Exploits1References3
CVE
CVE
added 2024/04/26 12:0 a.m.58 views

CVE-2024-33343

CVE-2024-33343 affects D-Link DIR-822+ V1.0.5; the ChgSambaUserSettings() function in prog.cgi allows command injection via shell due to lack of proper sanitization of the samba name parameter. This enables remote command execution on the device. Red Hat/NVD entries corroborate the vulnerability ...

8.8CVSS8.5AI score0.08911EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2024/04/26 12:0 a.m.1 views

D-Link DIR-822 安全漏洞

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the ChgSambaUserSettings function of prog.cgi, allowing remote attackers to execute arbitrary commands...

8.8CVSS8.2AI score0.08911EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/04/26 12:0 a.m.10 views

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

8.6AI score0.08911EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/04/26 12:0 a.m.13 views

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

8.4AI score0.08911EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/04/22 12:0 a.m.3 views

PT-2024-3193 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to the ChgSambaUserSettings function in the prog.cgi script of the D-Link DIR-822+ wireless router's firmware. It is caused by the lack of proper sanitization of special elements...

10CVSS8.1AI score0.08911EPSS
Exploits1References9
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS7.2AI score0.01096EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.2 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01044EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.2 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01372EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01044EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01044EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.2 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/18 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.2CVSS7.3AI score0.01749EPSS
Exploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.22 views

D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.22 views

D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Rows per page
Query Builder