10340 matches found
CVE-2022-46568
CVE-2022-46568 affects D-Link DIR-882 (DIR882A1_FW130B06) and DIR-878 (DIR_878_FW1.30B08). The root cause is a stack overflow in the SetSysEmailSettings module triggered by the AccountPassword parameter, exposing the devices to potential impact on confidentiality, integrity, and availability via ...
CVE-2022-46642
D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the autoupgradehour parameter in the SetAutoUpgradeInfo function...
CVE-2022-46642
D-Link DIR-846 A1FW100A43 was discovered to contain a command injection vulnerability via the autoupgradehour parameter in the SetAutoUpgradeInfo function...
CVE-2022-46568
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...
CVE-2022-46561
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module...
CVE-2022-46561
The CVE-2022-46561 entry concerns two D-Link router models: DIR-882 (DIR882A1_FW130B06) and DIR-878 (DIR_878_FW1.30B08). The vulnerability is a stack overflow in the SetWanSettings module triggered via the Password parameter. This is the underlying cause stated across the provided documents. The ...
PT-2022-27933 · D Link · D-Link Dir-846
Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version A1 FW100A43 Description: A command injection issue was discovered via the auto upgrade hour parameter in the SetAutoUpgradeInfo function. This allows for potential exploitation. No information is provided about the...
CVE-2022-46642
CVE-2022-46642 affects the D‑Link DIR‑846 A1 with firmware FW100A43. The root cause is improper input handling in the SetAutoUpgradeInfo function, where the parameter auto_upgrade_hour can be used to construct and execute commands, resulting in a remote command injection vulnerability. Impact per...
CVE-2022-46566: Out-of-bounds Write
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module...
CVE-2022-46563: Out-of-bounds Write
D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module...
D-Link DIR-882 buffer error vulnerability
The D-Link DIR-882 is a wireless router from China-based AUO D-Link. The D-Link DIR-882 DIR882A1FW130B06 suffers from a buffer error vulnerability that stems from the discovery of a contained stack overflow via the Password parameter in the SetDynamicDNSSettings module...
PT-2022-6580 · D Link · D-Link Dir-2640
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 routers affected versions not specified Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-2640-US router's firmware, specifically with insufficient validation of user-supplied inpu...
PT-2022-6578 · D Link · D-Link Dir-2640
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. The flaw exists within the web management interface, whic...
PT-2022-6583 · D Link · D-Link Dir-2640
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this issu...
PT-2022-6584 · D Link · D-Link Dir-2640
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions affected versions not specified Description: The issue is related to a stack-based buffer overflow in the prog.cgi web management interface of D-Link DIR-2640 routers. This occurs due to improper validation of...
PT-2022-6579 · D Link · D-Link Dir-2640
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this issu...
VulnCheck KEV: CVE-2018-20057
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter...
PT-2022-6581 · D Link · D-Link Dir-2640
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected D-Link DIR-2640 routers. The flaw exists within the web management interface, which listen...
PT-2022-6582 · D Link · D-Link Dir-2640-Us
Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640-US versions affected versions not specified Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-2640-US router's firmware, specifically with the handling of the LocalIPAddress...
