The vulnerability of D-Link DIR-816 A2 wireless routers’ microprogramming software lies in the fact that the operation is performed outside the buffer in memory. This allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the microprogrammed software of D-Link DIR-816 A2 wireless routers is related to the escape from the buffer boundaries in memory, resulting from the failure to take measures to neutralize special elements used in the operating system’s command for processing the urladd...

CVE-2024-0921

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

CVE-2024-0921

CVE-2024-0921 affects D-Link DIR-816 A2 (firmware 1.10CNB04). The Web Interface file /goform/setDeviceSettings is vulnerable; manipulating the statuscheckpppoeuser parameter enables OS command injection. Attacks can be launched remotely and exploit details have been publicly disclosed. Multiple s...

CVE-2024-0921 D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

PT-2024-1399 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: A critical vulnerability has been found in the Web Interface component of the D-Link DIR-816 A2, specifically in the /goform/setDeviceSettings file. The manipulation of the statuscheckpppoeuser...

CVE-2023-41963

Denial-of-service DoS vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

CVE-2023-49713

Denial-of-service DoS vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

Race condition

Denial-of-service DoS vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

Race condition

Denial-of-service DoS vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

Race condition

Denial-of-service DoS vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

Race condition

Denial-of-service DoS vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

CVE-2023-49713

The CVE-2023-49713 issue is a DoS vulnerability in the NetBIOS service of the HMI GC-A2 series. A remote unauthenticated attacker can cause a DoS by sending specially crafted packets to specific ports. Affected products include JTEKT ELECTRONICS GC-A2 family models; the vulnerability is described...

CVE-2023-49713

Denial-of-service DoS vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

CVE-2023-49143

The CVE-2023-49143 entry affects the HMI GC-A2 series, specifically the rfe service. A remote unauthenticated attacker can cause a denial-of-service by sending specially crafted packets to certain ports, potentially triggering a high-severity DoS (CVSS v3 base score 7.5). Connected sources confir...

CVE-2023-49140

CVE-2023-49140 affects JTEKT ELECTRONICS HMI GC-A2 series as described in multiple sources. The vulnerability is a denial-of-service (DoS) in the commplex-link service. A remote unauthenticated attacker can trigger the DoS by sending specially crafted packets to specific ports, potentially impact...

CVE-2023-49140

Denial-of-service DoS vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

CVE-2023-49140

Denial-of-service DoS vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

CVE-2023-41963

Denial-of-service DoS vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service DoS condition may occur...

CVE-2023-41963

The CVE-2023-41963 issue affects JTEKT ELECTRONICS HMI GC-A2 series where the FTP service can be abused by a remote, unauthenticated attacker to trigger a DoS by sending specially crafted packets to specific ports. The vulnerability can cause an availability impact as described in multiple source...

JTEKT ELECTRONICS HMI GC-A2 series Security Breach

JTEKT ELECTRONICS HMI GC-A2 series is a series of human machine interfaces from JTEKT. A security vulnerability exists in the HMI GC-A2 series due to a Denial of Service DOS vulnerability in the commplex-link service. Affected Products and Versions: GC-A22W-CW All Versions, GC-A24W-CW All Version...