CVE-2024-48272

D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack...

CVE-2024-48272

D-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password, possibly allowing attackers to connect to the device via a bruteforce attack...

PT-2024-7559 · D Link · D-Link Dsl-6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL-6740C version 6.TR069.20211230 Description: The issue is related to the use of weak password requirements in the D-Link DSL-6740C router's software component. This could allow a remote attacker to escalate their privileges. The...

CVE-2024-48272

CVE-2024-48272 affects D-Link DSL6740C (v6.TR069.20211230). The vulnerability stems from an insecure default WiFi password, enabling an attacker to brute-force and gain unauthorized device access (per CVE description and Red Hat/CNVD/CNNVD entries). Impact is described as potential unauthorized a...

CVE-2024-48271

D-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for Administrator access, possibly allowing attackers to bypass authentication and escalate privileges on the device via a bruteforce attack...

D-Link DSL6740C 安全漏洞

The D-Link DSL6740C is a wireless VDSL router from China AUO D-Link. A security vulnerability exists in the D-Link DSL6740C version v6.TR069.20211230, which originates from administrator access using insecure default credentials. An attacker exploiting this vulnerability could bypass authenticati...

The vulnerability of the SetGuestZoneRouterSettings function in D-Link’s DIR-822 and DIR-878 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetGuestZoneRouterSettings function in D-Link DIR-822 and DIR-878 router microprogramming systems lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2024-9032 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR 823G version 1.0.2B05 Description: The issue is related to a command injection vulnerability via the HostName parameter in the SetWanSettings function. This allows attackers to execute arbitrary OS commands via a crafted request. T...

ROS-20241028-03

The vulnerability of the quota component of the Linux kernel is related to the NULL pointer dereferencing in the functions dquotmarkdquotdirty, dquotallocspace, dquotallocinode, EXPORTSYMBOL, dquotclaimspacenodirty, dquotreclaimspacenodirty, dquotfreespace, dquotfreeinode, and dquottransfer in...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2024-2750)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the formSetWanPPPoE function (/goform/formSetWanPPPoE) in D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the formSetWanPPPoE function /goform/formSetWanPPPoE in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formAdvFirewall function (/goform/formAdvFirewall) of the D-Link DIR-619L router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formAdvFirewall function /goform/formAdvFirewall of the D-Link DIR-619L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, a...

The vulnerability of the formSetWanL2TP function (/goform/formSetWanL2TP) in the D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWanL2TP function /goform/formSetWanL2TP in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formEasySetupWizard() and formEasySetupWizard2() functions (/goform/formEasySetupWizard) of the D-Link DIR-605L router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formEasySetupWizard and formEasySetupWizard2 functions /goform/formEasySetupWizard of the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

The vulnerability of the formEasySetupWWConfig() function (/goform/formEasySetupWWConfig) in the D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formEasySetupWWConfig function /goform/formEasySetupWWConfig of the D-Link DIR-619L router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows an...

The vulnerability of the formSetEasy_Wizard function (/goform/formSetEasy_Wizard) in the D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetEasyWizard function /goform/formSetEasyWizard in D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

PT-2024-8854 · D Link · D-Link Dir-820L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-820L version 1.05b03 Description: The issue is related to the ping v4 and ping v6 functions in the D-Link DIR-820L router's firmware, which fails to properly sanitize data when handling the ping addr parameter. This can allow a...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2024-2768)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the formLogDnsquery() function (/goform/formLogDnsquery) in the D-Link DIR-619L router’s software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formLogDnsquery function /goform/formLogDnsquery of the D-Link DIR-619L router’s software lies in the fact that the operation’s output is written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows an attacker to...

The vulnerability of the formSetWanNonLogin function (/goform/formSetWanNonLogin) in the D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWanNonLogin function /goform/formSetWanNonLogin in the D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...