10335 matches found
Command injection
D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function...
CVE-2023-33781
Affected product: D-Link DIR-842V2, firmware 1.0.3. Vulnerability: arbitrary command execution via importing a crafted file (root cause described as lack of data cleaning at the management level in PT-2023-3100; other sources reiterate crafted-file import as the vector). Exploitation: demonstrate...
CVE-2023-33782
D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function...
CVE-2023-33781
An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file...
CVE-2023-33782
D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function...
CVE-2023-33782
The CVE-2023-33782 is tied to D-Link DIR-842V2 (firmware 1.0.3) where the iperf3 diagnostics function is vulnerable to command injection due to insufficient input sanitization. The vulnerability allows network-adjacent exploitation with low privileges and no user interaction, with high impact to ...
CVE-2023-33782: Improper Neutralization of Special Elements used in a Command
D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function...
CVE-2023-33781: Undefined Security Weakness
An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file...
D-Link DIR-620 XSS
The vulnerability of the web interface of D-Link DIR-620 router software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
D-Link DIR-605L Router Code Execution
The vulnerability of the /goform/formTcpipSetup component in D-Link DIR-605L router microprogramming software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
D-Link DIR-2150 Router Code Execution
The vulnerability of the GetDeviceSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially...
D-Link DIR-2150 Router Code Execution
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
D-Link DIR-2150 Router Code Execution
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
D-Link DIR-2150 Router Bypass Security Restrictions
The vulnerability of the LoginPassword function in the application software interface of D-Link DIR-2150 router software relates to the bypassing of authentication processes. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions by using a specially created...
D-Link DIR-620 Router Arbitrary Command Execution
The vulnerability of the index.cgi component in D-Link DIR-620 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using...
D-Link DIR-615 Code Execution
The vulnerability of the D-Link DIR-615 network device’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system’s command structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link DIR-601 Router Bypass
The vulnerability of D-Link DIR-601 router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
D-Link DIR-842 command injection vulnerability
The D-Link DIR-842 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-842V2 version 1.0.3, which stems from the presence of a command injection vulnerability...
D-Link DIR-842 security vulnerabilities
The D-Link DIR-842 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-842V2 version 1.0.3, which stems from the presence of a command execution vulnerability...