CVE-2022-43109

D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet...

CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42156: Improper Neutralization of Special Elements used in a Command

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

PT-2022-5278 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1200, 1202, 1203 v1.08 Description: The issue is related to a command injection vulnerability in the SetNetworkTomographySettings function. This vulnerability can be exploited via the tomography ping number parameter,...

CVE-2021-46314

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

Command injection

A Remote Command Execution RCE vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name...

CVE-2021-46452

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

CVE-2021-46452

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

Command injection

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

CVE-2021-46452

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

CVE-2021-46452: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

PT-2022-1554

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary commands via the tomography ping...

CVE-2019-9117: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

PT-2019-19371

Name of the Vulnerable Software and Affected Versions Motorola C1 version 1.01 Motorola M2 version 1.07 Description A Command Injection issue allows a remote attacker to execute arbitrary code and gain a root shell. This occurs through a crafted /HNAP1 POST request, where the tomography ping numb...

D-Link DIR-846 Remote Code Execution Vulnerability

D-Link DIR-846 is a wireless router product from AUO D-Link. A remote code execution vulnerability exists in the D-Link DIR-846 with firmware version 100.26, which can be exploited by remote attackers with administrator access to execute arbitrary code as root by sending a...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

CVE-2018-16408

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...

CVE-2018-16408: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-846 devices with firmware 100.26 allow remote attackers to execute arbitrary code as root via a SetNetworkTomographySettings request by leveraging admin access...