CVE-2024-48638

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48633

CVE-2024-48633 affects D-Link DIR-882 firmware DIR_882_FW130B06 and DIR-878 firmware DIR_878_FW130B08. The vulnerability exists in SetVirtualServerSettings, where input parameters ExternalPort, InternalPort, ProtocolNumber, and LocalIPAddress can be abused to inject OS commands. An attacker can t...

CVE-2024-48632

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts parameters in the SetPortForwardingSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a...

CVE-2024-48629

The CVE-2024-48629 entry concerns D-Link DIR-882 and DIR-878 devices (firmware DIR_882_FW130B06 and DIR_878_FW130B08) with a command-injection vulnerability in SetGuestZoneRouterSettings via the IPAddress parameter. Exploitation could allow an attacker to execute arbitrary OS commands through a c...

D-Link DIR-878和D-Link DIR-882 安全漏洞

The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...

D-Link DIR-878和D-Link DIR-882 安全漏洞

The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...

D-Link DIR-878和D-Link DIR-882 安全漏洞

The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...

D-Link DIR-820L Buffer Overflow Vulnerability (CNVD-2024-41037)

The D-Link DIR-820L is a dual-band wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-820L version 1.05B03, which originates from a boundary error in the sub451208 function when handling untrusted input. A remote attacker could exploit this...

D-Link DCS-960L Buffer Overflow Vulnerability

D-Link DCS-960L is a webcam product from China AUO D-Link. A buffer overflow vulnerability exists in the D-Link DCS-960L version 1.09, which originates from a boundary error in the sub402280 function when handling untrusted input. An attacker can exploit the vulnerability to execute arbitrary cod...

CVE-2024-48630

CVE-2024-48630 affects D-Link DIR-882 (FW130B06) and DIR-878 (FW130B08). The vulnerability arises from insufficient input sanitization in the SetMACFilters2 MacAddress parameter, allowing an attacker to inject and execute OS commands via a crafted POST request. The CVSSv3.1 details indicate adjac...

CVE-2024-48637

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48632

D-Link DIR-878 (DIR 878 FW130B08) and DIR-882 (DIR 882 FW130B06) routers are affected by command-injection vulnerabilities in SetPortForwardingSettings implemented in prog.cgi. The root cause is improper neutralization of input (LocalIPAddress, TCPPorts, UDPPorts) that enables remote attackers to...

CVE-2024-48635

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48634

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48634

Summary : CVE-2024-48634 affects D-Link DIR-882 (firmware FW130B06) and DIR-878 (FW130B08). The vulnerability is a command injection in the SetWLanRadioSecurity function, exploitable via the key parameter through a crafted POST request, enabling arbitrary OS commands. The issue arises from insuff...

CVE-2024-48631

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48636

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48637

CVE-2024-48637 affects D-Link DIR-878 and DIR-882 (firmware DIR-878 FW130B08; DIR-882 FW130B06). Root cause: lack of neutralization of special elements in SetVLANSettings (prog.cgi) allowing command injection via VLANID:1/VID parameter in a crafted POST request. Impact: remote attacker can execut...

D-Link DIR-878和D-Link DIR-882 安全漏洞

The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...

D-Link DIR-619L formSetQoS function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-619L B12.06 version, which originates from the parameter curTime in file /goform/formSetQoS that fails to correctly validate the length size of the input data, and can be...