CVE-2022-37125

CVE-2022-37125 affects D-Link DIR-816 A2, specifically the /goform/NTPSyncWithHost endpoint. The connected documents consistently indicate a command injection vulnerability in the DIR-816 A2_v1.10CNB04.img, enabling arbitrary command execution via that API. The CVE entry lists a high/critical imp...

CVE-2022-37128: Improper Initialization

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37125: Improper Neutralization of Special Elements used in a Command

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

D-Link DIR-816 Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the mirrored version of the D-link DIR-816 firmware A2v1.10CNB04.img. The vulnerability stems from the fact that when the wantype of its /goform/form2Wan.cgi component is 3, the...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64489)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 firmware version, which originates from a boundary error in the proto parameter in /goform/form2IPQoSTcAdd when handling untrusted input. An attacker...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64490)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 firmware version, which originates from a boundary error in the lanip parameter in /goform/setNetworkLan when handling untrusted input. An attacker...

Stack overflow

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd...

CVE-2022-29327

CVE-2022-29327 affects the D-Link DIR-816 A2_v1.10CNB04 router. A boundary/stack overflow is triggered by the urladd parameter in /goform/websURLFilterAddDel, caused by processing untrusted input. Impact per sources: potential arbitrary code execution or a system crash. Exploitation details are n...

CVE-2022-29321

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

CVE-2022-29323

The CVE-2022-29323 entry affects D-Link DIR-816 A2_v1.10CNB04. A stack/buffer overflow is triggered by the MAC parameter in the /goform/editassignment handler. The vulnerability could allow arbitrary code execution or a system crash, as indicated by the connected records. No remediation or patch ...

CVE-2022-29327: Out-of-bounds Write

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel...

CVE-2022-29323: Out-of-bounds Write

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment...

CVE-2022-28915: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm...