Lucene search
K

284 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.22 views

D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.29 views

D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.15 views

D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.22 views

D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.26 views

D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01044EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.18 views

D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01044EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.24 views

D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.19 views

D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01044EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:0 a.m.21 views

D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01749EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/27 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer and is stored in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted HNAP...

7.5CVSS7.9AI score0.00783EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.8CVSS8.3AI score0.00675EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS7.8AI score0.00094EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/12 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data during the processing of the HNAP request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS7.9AI score0.00094EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:0 a.m.2 views

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software lies in the fact that the output of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to T...

8.8CVSS8.3AI score0.00517EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/06 12:0 a.m.1 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to bypass the authentication process and gain full access to the device.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows attackers to bypass authentication processes and gain full access to the device...

8.8CVSS7.6AI score0.00128EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.2 views

PT-2023-6110 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi binary,...

8.8CVSS7.3AI score0.00675EPSS
Exploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:0 a.m.30 views

(0Day) D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi executable. The issue results from an incorrect...

8.8CVSS6.9AI score0.00128EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:0 a.m.19 views

(0Day) D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

8CVSS7.4AI score0.00094EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.1 views

PT-2023-5853 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to the SetSysEmailSettings function of the D-Link DIR-X3260 Wi-Fi router's firmware, which is associated with insufficient input data cleaning. This can be...

8CVSS7.6AI score0.00094EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/10/04 12:0 a.m.2 views

PT-2023-5898 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8CVSS7.6AI score0.00094EPSS
Exploits0References6
Rows per page
Query Builder