Command injection

D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the autoupgradehour parameter in the SetAutoUpgradeInfo function...

CVE-2022-46563

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module...

CVE-2022-46566

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module...

CVE-2022-46641

CVE-2022-46641 concerns the D-Link DIR-846 A1_FW100A43 router, where a vulnerability in the SetIpMacBindSettings function allows command injection through the lan(0)_dhcps_staticlist parameter. This is a network‑vector issue with critical impact (CVSS 9.9) and affects confidentiality, integrity, ...

PT-2022-27932 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version A1 FW100A43 Description: A command injection issue was discovered via the lan0 dhcps staticlist parameter in the SetIpMacBindSettings function. This allows for potential command injection attacks. Recommendations: For...

CVE-2022-46560

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module...

CVE-2022-46562

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module...

CVE-2022-46569

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module...

CVE-2022-46562

CVE-2022-46562 affects D-Link DIR-882 and DIR-878 firmware (DIR882A1_FW130B06 and DIR_878_FW1.30B08). A stack overflow via the PSK parameter in the SetQuickVPNSettings module is described, with potential for remote code execution or crash if exploited. Public details in the sources are focused on...

D-Link DIR-882 buffer error vulnerability

The D-Link DIR-882 is a wireless router from China-based AUO D-Link. A buffer error vulnerability exists in the D-Link DIR-882 DIR882A1FW130B06 version, which stems from the discovery of a contained stack overflow vulnerability via the Password parameter in the SetWan2Settings module...

PT-2022-6230 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 1.20B03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this issue. The specific flaw...

CVE-2022-46641

D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the lan0dhcpsstaticlist parameter in the SetIpMacBindSettings function...

CVE-2022-46562: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module...

CVE-2022-46569: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module...

CVE-2022-46560: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module...

D-Link DIR-882 buffer error vulnerability

D-Link DIR-882 is a wireless router from China Youxun D-Link.D-Link DIR-882 DIR882A1FW130B06 has a security vulnerability that stems from a PSK parameter found through the SetQuickVPNSettings module that contains a stack overflow. No detailed vulnerability details are currently available...

PT-2022-7101 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 version DIR882A1 FW130B06 D-Link DIR-878 version DIR 878 FW1.30B08 Description: A stack overflow issue was discovered in the SetQuickVPNSettings module of the D-Link DIR-882 and DIR-878 wireless routers, related to the Password...

CVE-2022-46561: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module...

PT-2022-7102 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 versions DIR882A1 FW130B06 D-Link DIR-878 versions DIR 878 FW1.30B08 Description: The issue is related to a buffer overflow in the SetDynamicDNSSettings module of the D-Link DIR-882 and DIR-878 wireless router firmware. This ca...

PT-2022-7100 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 versions DIR882A1 FW130B06 D-Link DIR-878 versions DIR 878 FW1.30B08 Description: The issue is related to a buffer overflow in the SetWan3Settings module of the D-Link DIR-882 and DIR-878 wireless router firmware. This can be...