D-Link DIR-605L Router Code Execution

The vulnerability of the formEasySetPassword function /goform/formEasySetPassword in D-Link DIR-605L router microprogramming software is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using th...

D-Link Router Arbitrary Command Execution

The vulnerability of the SetGuestZoneRouterSettings function in D-Link DIR-822 and DIR-878 router microprogramming systems lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2024-9032 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR 823G version 1.0.2B05 Description: The issue is related to a command injection vulnerability via the HostName parameter in the SetWanSettings function. This allows attackers to execute arbitrary OS commands via a crafted request. T...

PT-2024-8854 · D Link · D-Link Dir-820L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-820L version 1.05b03 Description: The issue is related to the ping v4 and ping v6 functions in the D-Link DIR-820L router's firmware, which fails to properly sanitize data when handling the ping addr parameter. This can allow a...

D-Link DIR-619L Router Data Compromise

The vulnerability of the formEasySetupWWConfig function /goform/formEasySetupWWConfig of the D-Link DIR-619L router’s microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows an...

D-Link DIR-619L formLogDnsquery XSS

The vulnerability of the formLogDnsquery function /goform/formLogDnsquery of the D-Link DIR-619L router’s software lies in the fact that the operation’s output is written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows an attacker to...

D-Link DIR-605L Router Form Set Wizard Buffer Overflow

The vulnerability of the formSetWizard1 and formSetWizard2 functions in the D-Link DIR-605L router’s microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

D-Link DIR-605L Router formSetWanNonLogin Data Compromise

The vulnerability of the formSetWanNonLogin function /goform/formSetWanNonLogin in the D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

D-Link DIR-605L Router FormSetEasy_Wizard Buffer Overflow

The vulnerability of the formSetEasyWizard function /goform/formSetEasyWizard in D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

D-Link DIR-605L Router formSetWanPPTP Data Compromise

The vulnerability of the formSetWanPPTP function /goform/formSetWanPPTP of the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

D-Link DIR-605L Router FormLogDnsquery Data Compromise

The vulnerability of the formLogDnsquery function /goform/formLogDnsquery in D-Link DIR-605L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

D-Link DIR-605L Router formSetWanPPPoE

The vulnerability of the formSetWanPPPoE function /goform/formSetWanPPPoE in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

D-Link DIR-605L Router Form Easy Setup XSS

The vulnerability of the formEasySetupWizard and formEasySetupWizard2 functions /goform/formEasySetupWizard of the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

D-Link DIR-820L Router Sub_451208 Function Heap Buffer Overflow

The vulnerability of the sub451208 function in D-Link DIR-820L router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

D-Link DIR-878/DIR-882 SetVLANSettings Command Execution

The vulnerability of the SetVLANSettings function in D-Link DIR-878 and DIR-882 router microprogramming systems exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitra...

D-Link DIR-605L Router Code Execution

The vulnerability of the formWlanWizardSetup function /goform/formWlanWizardSetup in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

D-Link DIR-619L Router Code Execution

The vulnerability of the formEasySetPassword function in the D-Link DIR-619L router’s software lies in the fact that the execution of the operation is carried out outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the curTime...

D-Link DIR-605L Router Code Execution

The vulnerability of the formSetPassword function /goform/formSetPassword in the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code usi...

D-Link DIR-619L Router Code Execution

The vulnerability of the formDeviceReboot function in D-Link DIR-619L router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the nextpage parameter...

D-Link DIR-878/DIR-882 Router Arbitrary Command Execution

The vulnerability of the SetPortForwardingSettings function in the prog.cgi script of D-Link DIR-878 and DIR-882 routers exists because measures to neutralize special elements used in operating system commands are not taken. Exploiting this vulnerability allows a malicious actor to execute...