CVE-2025-4842

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. This vulnerability affects the function isUCPCameraNameChanged of the file /sbin/ucp. The manipulation of the argument CameraName leads to stack-based buffer overflow. The attack can be initiated remotely. The...

CVE-2025-4841

A vulnerability was found in D-Link DCS-932L 2.18.01 and classified as critical. Affected by this issue is the function sub404780 of the file /bin/gpio. The manipulation of the argument CameraName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been...

CVE-2025-4843

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-4883

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been declared as critical. This vulnerability affects the function ctxzasp of the file /ctxz.asp of the component Connection Limit Page. The manipulation of the argument def/defTcp/defUdp/defIcmp/defOther leads to stack-based buffer...

CVE-2025-44084

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system...

CVE-2025-44084

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system...

D-Link DIR-605L formSetWAN_Wizard534 Function Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a buffer overflow vulnerability that stems from the formSetWANWizard534 function parameter curTime failing to correctly validate the length size of the input data, which can be exploited by an...

D-Link DIR-619L formSysCmd Function Command Injection Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the formSysCmd function sysCmd parameter failing to properly filter construct command special characters, commands, etc. No details of the...

D-Link DIR-619L wake_on_lan Function Command Injection Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...

D-Link DIR-605L formSetWAN_Wizard55 Function Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a buffer overflow vulnerability that stems from the formSetWANWizard55 function parameter curTime failing to correctly validate the length and size of the input data, which can be exploited by an...

D-Link DIR-619L formSetWizard2 function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWizard2 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...

PT-2025-22244 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-link DI-8100 version 16.07.26A1 Description: The issue allows an attacker to exploit a Command Injection flaw by crafting specific HTTP requests. This triggers the command execution flaw and can provide the attacker with the highest privile...

CVE-2025-44084

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system...

CVE-2025-44084

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the command execution flaw and gaining the highest privilege shell access to the firmware system...

D-Link DIR-619L formEasySetupWizard function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the curTime parameter of the formEasySetupWizard function failing to properly validate the length of the input data, which can be exploited by an...

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium sized network environments. A command injection vulnerability exists in the D-Link DI-8100. The vulnerability stems from the logic code's lax input filtering, which can be exploited by an attacker to gain highest...

D-Link DIR-605L sysCmd Parameter Command Injection Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter sysCmd failing to properly filter constructed command special characters, commands, and so on. No details of the vulnerability are...

D-Link DIR-605L mac parameter command injection vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter mac failing to properly filter constructed command special characters, commands, and more. No details of the vulnerability are provide...

D-Link DIR-619L formSetWAN_Wizard52 Function Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWANWizard52 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...

CVE-2025-44084

The CVE-2025-44084 entry concerns D-Link DI-8100, firmware 16.07.26A1, vulnerable to Command Injection via crafted HTTP requests. The root cause is described in connected sources as lax input filtering in the router’s logic, enabling an attacker to trigger command execution and obtain the highest...