D-Link DIR-2150: Operating System Command Injection Vulnerability

The D-Link DIR-2150 is an AC2100 specification wireless router that supports dual-band 2.4GHz and 5GHz wireless transmission, provides four Gigabit wired interfaces, and has a maximum theoretical transfer rate of up to 2100Mbps. The D-Link DIR-2150 suffers from an operating system command injecti...

D-Link DIR-1935 security vulnerabilities

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-1935 that stems from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer when parsing NetMask elements...

D-Link DIR-1935 security vulnerabilities

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-1935. An attacker has exploited the vulnerability to bypass authentication on the system...

D-Link DIR-1935 security vulnerabilities

The D-Link DIR-1935 is a wireless router from China-based D-Link. A security vulnerability exists in the D-Link DIR-1935 that originates when parsing the HNAPAUTH header, where the process does not properly validate the length of user-supplied data before copying it into a fixed-length buffer...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that stems from a process not properly validating before executing a system call with a user-supplied string when parsing sub-elements of a...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing sub-elements within an IPv6FirewallRule element, where the process does not properly validate before executing a...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that stems from a process not properly validating before executing a system call with a user-supplied string when parsing sub-elements within ...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing sub-elements of a StaticRouteIPv4Data element, where the process does not properly validate before executing a...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China's AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing sub-elements within a VirtualServerInfo element, where the process does not properly validate before executing a syst...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing an IPAddress element, where the process does not properly validate before executing a system call with a...

D-Link DIR-825 operating system command injection vulnerability

The D-Link DIR-825 is a router from China-based AUO D-Link. The D-Link DIR-825 suffers from an operating system command injection vulnerability that originates from failure to properly validate a user-supplied string before executing a system call using it...

D-Link DIR-825 operating system command injection vulnerability

The D-Link DIR-825 is a router from China-based AUO D-Link. The D-Link DIR-825 suffers from an operating system command injection vulnerability that originates from failure to properly validate a user-supplied string before executing a system call using it...

CVE-2022-43643

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd service, which listens on TC...

CVE-2022-43633

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43620

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the la...

CVE-2022-43624

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43630: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of http requests to the web management portal. When...

CVE-2022-43633: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43629

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43629: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...