CVE-2020-8861

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

CVE-2020-8861

The CVE-2020-8861 issue affects D-Link DAP-1330 1.10B01 BETA Wi‑Fi range extenders. It arises from incorrect handling of HNAP login requests and cookies, enabling network‑adjacent attackers to bypass authentication. The vulnerability has been described as allowing the attacker to execute arbitrar...

CVE-2020-8861: Incorrect Implementation of Authentication Algorithm

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...

CVE-2020-8862: Incorrect Comparison

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...

D-Link DAP-2610 Router login Incorrect Comparison Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper...

D-Link DAP-1330 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results fr...

The vulnerability of the web interface of D-Link DAP-1320 A2 microprogramming software for wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of D-Link DAP-1320 A2 wireless router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the SS...

CVE-2019-19597

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

CVE-2019-19597

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

CVE-2019-19598

D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAPAUTH header timestamp value. In HTTP requests, part of the HNAPAUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to...

Remote code execution

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

Design/Logic Flaw

D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAPAUTH header timestamp value. In HTTP requests, part of the HNAPAUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to...

CVE-2019-19597

The D-Link DAP-1860 WiFi range extender is vulnerable to arbitrary remote code execution as root without authentication. The root cause is the improper handling of shell metacharacters within the HNAP_AUTH HTTP header . Affected devices are those running firmware versions before v1.04b03 Beta . S...

CVE-2019-19597

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

CVE-2019-19598

D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAPAUTH header timestamp value. In HTTP requests, part of the HNAPAUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to...

CVE-2019-19598

CVE-2019-19598 affects D-Link DAP-1860 devices prior to v1.04b03 Beta. The vulnerability allows bypassing authentication to access administrator functions via the HNAP_AUTH header timestamp; if the timestamp matches the device’s /var/hnap/timestamp value, the HNAP_AUTH check passes. This is an ad...

CVE-2019-19597: Incorrect Authorization

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

D-Link DAP-1860 Authorization Issues Vulnerability

The D-Link DAP-1860 is a WiFi range extender from AUO D-Link of Taiwan, China. The D-Link DAP-1860 is vulnerable to an authorization issue. An attacker can exploit the vulnerability to gain unauthenticated access to administrator functions with the help of a timestamp value in the HNAPAUTH header...

D-Link DAP-1860 Remote Code Execution Vulnerability

The D-Link DAP-1860 is a WiFi range extender from AUO D-Link of Taiwan, China. A remote code execution vulnerability exists in the D-Link DAP-1860. The vulnerability can be exploited by an attacker to execute arbitrary code with root privileges with the help of shell metacharacters in the HNAPAUT...

CVE-2019-19598: Improper Authentication

D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAPAUTH header timestamp value. In HTTP requests, part of the HNAPAUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to...