The vulnerability of the formSetEnableWizard() function in the /goform/formSetEnableWizard file of the D-Link DIR-619L router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the formSetEnableWizard function in the /goform/formSetEnableWizard file of the D-Link DIR-619L router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the curTime parameter. Exploiting this...

The vulnerability of the yyxz_dlink_asp() function in D-Link DI-8200 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the yyxzdlinkasp function in D-Link DI-8200 router microprogramming software is related to buffer overflows in the stack when processing the id parameter. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the microprogrammed software of D-Link DIR-823-Pro wireless routers allows a intruder to gain unauthorized access to Telnet services.

The vulnerability of D-Link DIR-823-Pro wireless routers’ microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to Telnet services...

The vulnerability of D-Link DPH-400S and DPH-400SE VoIP phones, which stems from the disclosure of information through registration files, allows attackers to disclose the protected information.

The vulnerability of D-Link DPH-400S and DPH-400SE VoIP phones lies in the ability to disclose information through registration files. Exploiting this vulnerability allows a remote attacker to disclose the protected information...

The vulnerability of the /goform/formdumpeasysetup file in D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /goform/formSetDomainFilter function in the microprogramming software for D-Link DIR-619L routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...

The vulnerability of the formdumpeasysetup() function (/goform/formdumpeasysetup) in D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formdumpeasysetup function /goform/formdumpeasysetup in D-Link DIR-619L router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of D-Link DIR-825 router’s microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DIR-825 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the wget_test.asp script in the D-Link DI-7300G+ router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the wgettest.asp script of the D-Link DI-7300G+ router microprogramming system is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the formSetWAN_Wizard51() function (/goform/formSetWAN_Wizard51) in the D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formAdvanceSetup function /goform/formAdvanceSetup of the D-Link DIR-619L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

CVE-2025-51384

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecnetasp function via the remotip parameter...

CVE-2025-51385

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxzdlinkasp function via the id parameter...

CVE-2025-51383

D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecroadasp function via the hostip parameter...

CVE-2012-10021

A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode function. The flaw arises from unsafe usage of sprintf when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogin. A...

CVE-2013-10059

An authenticated OS command injection vulnerability exists in various D-Link routers tested on DIR-615H1 running firmware version 8.04 via the toolsvct.htm endpoint. The web interface fails to sanitize input passed from the pingipaddr parameter to the toolsvct.htm diagnostic interface, allowing...

CVE-2013-10048

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 firmware ≤ 2.13 and ≤ 2.14b01, respectively—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker c...

CVE-2013-10050

An OS command injection vulnerability exists in multiple D-Link routers confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13 via the authenticated toolsvct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid...

CVE-2013-10048 D-Link Devices command.php Unauthenticated RCE

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 firmware ≤ 2.13 and ≤ 2.14b01, respectively—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker c...

CVE-2013-10048

The CVE-2013-10048 entry describes an OS command injection in legacy D-Link routers (DIR-300 rev B and DIR-600) due to unauthenticated input handling in the command.php endpoint. A remote attacker can send specially crafted POST requests to execute arbitrary shell commands with root privileges, e...

CVE-2013-10048 D-Link Devices command.php Unauthenticated RCE

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 firmware ≤ 2.13 and ≤ 2.14b01, respectively—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker c...

CVE-2013-10050

An OS command injection vulnerability exists in multiple D-Link routers confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13 via the authenticated toolsvct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid...