TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17121)

TOTOLINK A720R is a wireless router.TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via the flag parameter...

D-Link DIR-846 Command Execution Vulnerability

A command execution vulnerability exists in the D-Link DIR-846, a wireless router from D-Link in Taiwan, China, which originates in the product HNAP1/control/SetNetworkTomographySettings.php file. The vulnerability is caused by the fact that the HNAP1/control/SetNetworkTomographySettings.php file...

TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17117)

TOTOLink T6 is a wireless dual-band router from TotoLink, China. recvmeshinfosync function of TOTOLink T6 is vulnerable to command injection. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15175)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

Multiple TOTOLink product command injection vulnerabilities

TOTOLink A3100R is a wireless router. TOTOLink A830R is a wireless dual-band router.TOTOLink A720R is a wireless router. Several TOTOLink products are vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the IpFrom parameter...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15179)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the staticroutelist parameter...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15178)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 has a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the ApCliKeyStr parameter...

TOTOLINK A720R Stack Overflow Vulnerability (CNVD-2022-17123)

TOTOLINK A720R is a wireless router. TOTOLINK A720R v4.1.5cu.470B20200911 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via host parameters...

D-Link DIR-882 Operating System Command Injection Vulnerability

D-Link DIR-882 is a wireless router from D-Link Taiwan, China. The D-Link DIR-882 suffers from an operating system command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

Stack overflow vulnerability in multiple TOTOLink products

TOTOLink A3100R is a wireless router. TOTOLink A830R is a wireless dual-band router.TOTOLink A720R is a wireless router. A stack overflow vulnerability exists in several TOTOLink products, which can be exploited by attackers to cause a denial of service via the IpTo parameter...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15177)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 contains a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the stationaccessenable parameter...

D-Link DIR-878 Operating System Command Injection Vulnerability

D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company in China. The D-Link DIR-878 is vulnerable to an operating system command injection vulnerability, which stems from the inclusion of a command injection vulnerability in a system function. An attacker could exploit the...

D-Link DIR-846 Command Execution Vulnerability (CNVD-2022-38534)

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15176)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

TOTOLink T6 Command Injection Vulnerability (CNVD-2022-17118)

TOTOLink T6 is a wireless dual-band router from TotoLink, China.A command injection vulnerability exists in the meshSlaveDlfw function of TOTOLink T6. An attacker can exploit this vulnerability to execute arbitrary commands via specially crafted MQTT packets...

D-Link DIR-878 OS Command Injection Vulnerability (CNVD-2022-14785)

D-Link DIR-878 is a wireless router from D-Link Taiwan, China. The D-Link DIR-878 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

CVE-2021-45401

CVE-2021-45401 describes a command-injection vulnerability in the Tenda AC10U AC1200 router (AC10U V1.0 firmware V15.03.06.49_multi) exploited via the setUsbUnload path. The client-supplied deviceName is passed directly to the doSystemCmd function, enabling arbitrary command execution. Documents ...

Tenda AX3 Buffer Overflow Vulnerability (CNVD-2022-12736)

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda, China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the devName parameter...

D-Link DIR-846 安全漏洞

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

Tenda Ax3 Buffer Overflow Vulnerability (CNVD-2022-11181)

Tenda Ax3 is an Ax1800 Gigabit port dual-band Wifi 6 wireless router from Tenda China. Tenda AX3 v16.03.12.10CN is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to cause a denial of service DoS via list parameters...