1735 matches found
CVE-2025-1538
CVE-2025-1538 affects D-Link DAP-1320 (firmware 1.00). The vulnerability is in function set_ws_action under /dws/api/, causing a heap-based buffer overflow and enabling remote abuse. Multiple sources corroborate remote access and code execution potential, although some entries note the product is...
CVE-2025-1538 D-Link DAP-1320 api set_ws_action heap-based overflow
A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and m...
PT-2025-7523 · D Link · D-Link Dap-1320
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1320 version 1.00 Description: A critical issue has been found, affecting the function replace special char of the file /storagein.pd-XXXXXX. This issue leads to a stack-based buffer overflow and can be exploited remotely. The...
D-Link DAP-1320 安全漏洞
The D-Link DAP-1320 is a wireless signal extender from China-based AUO D-Link. The D-Link DAP-1320 suffers from a stack buffer overflow vulnerability that originates from the function setwsaction in the file /dws/api/. An attacker can exploit this vulnerability to cause a program crash or even...
CVE-2020-27864
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...
CVE-2020-27865
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on T...
CVE-2020-15631
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03HOTFIX WiFi extenders. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...
CVE-2020-8861
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
CVE-2020-8862
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from t...
CVE-2024-23624
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...
CVE-2024-23625
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...
D-Link DAP-2555 DoS Vulnerability (SAP10232)
D-Link DAP-2555 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
The vulnerability of the /bin/webs file in D-Link DAP-1513 wireless access points allows a hacker to cause a service failure.
The vulnerability of the /bin/webs file in D-Link DAP-1513 wireless access points is related to errors in pointer redirection due to incorrect checking of HTTP request formats. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted HTTP...
D-Link DAP-1520 DoS Vulnerability (SAP10395)
D-Link DAP-1520 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
The vulnerability of the /sbin/httpd microprogramming system used in wireless access points DAP-2555 allows a attacker to cause a service failure.
The vulnerability of the /sbin/httpd microprogramming system used by D-Link DAP-2555 wireless access points is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted HTTP...
D-Link DAP-1513 Multiple Vulnerabilities (Nov 2022)
D-Link DAP-1513 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
D-Link DAP-1520 Denial of Service Vulnerability
The D-Link DAP-1520 is a wireless access point product from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-1520 REVAFIRMWARE1.10B04BETA02HOTFIX version, which originates from a null pointer dereference. An attacker can exploit the vulnerability to cause a denial of...
D-Link DAP-2555 Denial of Service Vulnerability
The D-Link DAP-2555 is a wireless access point from China AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-2555 REVAFIRMWARE1.20 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...
D-Link DAP-1513 Denial of Service Vulnerability
The D-Link DAP-1513 is a wireless bridge from China-based AUO D-Link. A denial of service vulnerability exists in the D-Link DAP-1513 REVAFIRMWARE1.01 version that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...
