The vulnerability of the ipsec_road_asp function in D-Link DI-8003 router microprogramming software allows a attacker to cause a service failure.

The vulnerability of the ipsecroadasp function in D-Link DI-8003 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the DDNS service in the D-Link DIR-816 A2 router software allows a hacker to compromise the integrity of the protected information.

The vulnerability of the DDNS service in the D-Link DIR-816 A2 router software lies in its lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the IP QoS Handler component in D-Link DIR-816 A2 microprogramming router software allows attackers to compromise the integrity of protected information.

The vulnerability of the IP QoS Handler component in D-Link DIR-816 A2 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

CVE-2025-1800

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function getipaddrdetails of the file /view/vpn/sxhvpn/sxhvpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. Th...

CVE-2025-1800 D-Link DAR-7000 HTTP POST Request sxh_vpnlic.php get_ip_addr_details command injection

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function getipaddrdetails of the file /view/vpn/sxhvpn/sxhvpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. Th...

CVE-2025-1800

The CVE-2025-1800 entry concerns D-Link DAR-7000 (version 3.2) with a command-injection in the HTTP POST handler: get_ip_addr_details in /view/vpn/sxh_vpn/sxh_vpnlic.php. The ethname parameter is not properly filtered, enabling remote exploitation. Multiple sources (NVD, Red Hat, CNVD, CVE listin...

CVE-2025-1800 D-Link DAR-7000 HTTP POST Request sxh_vpnlic.php get_ip_addr_details command injection

A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function getipaddrdetails of the file /view/vpn/sxhvpn/sxhvpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. Th...

D-Link DAR-7000 注入漏洞

The D-Link DAR-7000 is an Internet Behavior Management and Auditing Gateway device that provides Internet behavior management and auditing capabilities. The D-Link DAR-7000 suffers from a command injection vulnerability that stems from the ethname parameter of the getipaddrdetails function in the...

D-Link DSL-3782 Buffer Overflow Vulnerability

The D-Link DSL-3782 is a wireless router from China-based AUO D-Link. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that originates in the destination, netmask and gateway parameters, which can be exploited by an attacker to cause a denial of service...

The vulnerability of D-Link DSL-3782 router’s microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DSL-3782 router microprogramming software is related to buffer overflows in the stack when processing parameters sstartip, sendip, dstartip, and dendip. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted...

The vulnerability in the prog.cgi module of the SetIPv6PppoeSettings software, which is used by D-Link DIR-853 A1 routers, allows a hacker to cause a service failure.

The vulnerability in the prog.cgi script of the SetIPv6PppoeSettings module of the D-Link DIR-853 A1 router’s microprogramming system is related to buffer overflow during the processing of the IPv6PppoePassword parameter. Exploiting this vulnerability can allow an attacker to cause a service...

VulnCheck KEV: CVE-2016-6563

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822,...

VulnCheck KEV: CVE-2022-41140

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lighttpd service, which listens on TCP port 80 by default. The...

D-Link DIR-823 Multiple Vulnerabilities (2025)

D-Link DIR-823 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the replace_special_char() function in the microprogramming software of the D-Link DAP-1320 wireless signal amplifier allows a intruder to trigger a service failure.

The vulnerability of the replacespecialchar function in the D-Link DAP-1320 wireless signal amplifier software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the device...

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a service failure.

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing parameters like the netmask and gateway. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability of D-Link DSL-3782 router microprogramming software, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of D-Link DSL-3782 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the publictype parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DSL-3782 Multiple Parameter Buffer Overflow Vulnerability

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that originates in the destination, netmask, and gateway parameters, which can be exploited by an attacker to cause a denial of service...

D-Link DSL-3782 Multiple Parameter OS Command Injection Vulnerability

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from an OS command injection vulnerability that originates from the inIP, insPort, inePort, exsPort, exePort, and protocol parameters, which can be exploited by an attacker to execute arbitrary...

The vulnerability of D-Link DSL-3782 router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a service failure.

The vulnerability of D-Link DSL-3782 router microprogramming software lies in the fact that the operation data is written outside the buffer in memory when processing parameters such as destination, netmask, and gateway. Exploiting this vulnerability allows a remote attacker to cause a service...