CVE-2024-44674

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

D-Link COVR-2600R Buffer Overflow Vulnerability

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

CVE-2024-44674

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

CVE-2024-44674

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

PT-2024-31204

Name of the Vulnerable Software and Affected Versions D-Link COVR-2600R version FW101b05 Description The issue is related to a Buffer Overflow vulnerability. In the function sub 24E28, the HTTP REFERER is obtained through an environment variable, and this field is controllable, allowing it to be...

CVE-2024-44674

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

CVE-2024-44674

The D-Link COVR-2600R wireless router, specifically on firmware FW101b05 , is vulnerable to a Buffer Overflow (specifically a Stack-based Buffer Overflow ). The root cause is located in the function sub_24E28 , where the HTTP_REFERER is retrieved via an environment variable. Because this field is...

CVE-2024-44674: Stack-based Buffer Overflow

D-Link COVR-2600R FW101b05 is vulnerable to Buffer Overflow. In the function sub24E28, the HTTPREFERER is obtained through an environment variable, and this field is controllable, allowing it to be used as the value for src...

D-Link COVR-2600R 安全漏洞

The D-Link COVR-2600R is a wireless router from China-based AUO D-Link. The D-Link COVR-2600R suffers from a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

Hardcoded credentials

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration...

CVE-2018-20432

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration...

CVE-2018-20432

CVE-2018-20432 affects D-Link COVR-2600R and COVR-3902 Kit prior to firmware version 1.01b05Beta01. The issue is hardcoded credentials for the telnet service, enabling unauthenticated privileged access and potential data extraction or configuration modification. A PoC exists showing steps to reve...

CVE-2018-20432: Use of Hard-coded Credentials

D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration...

PT-2020-3947 · D Link · D-Link Covr-2600R +1

Name of the Vulnerable Software and Affected Versions: D-Link COVR-2600R and COVR-3902 Kit versions prior to 1.01b05Beta01 Description: The issue is related to the use of hardcoded credentials for telnet connections, allowing unauthenticated attackers to gain privileged access to the router. This...