10340 matches found
CVE-2022-46076
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
Authentication flaw
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
D-Link DIR-3040 Command Injection Vulnerability
D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...
CVE-2022-46076: Incorrect Authorization
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
D-Link DIR-869 security vulnerabilities
The D-Link DIR-869 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-869 DIR869AxFW102B15 version, which stems from an easy authentication bypass via phpcgi...
Tenda F1203 security vulnerabilities
The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from the speeddir parameter of its /goform/SetSpeedWan component that allows an attacker to implement a buffer overflow...
CVE-2022-46076
CVE-2022-46076 affects D-Link DIR-869 (DIR869Ax_FW102B15) with an Authentication Bypass via phpcgi. CVSSv3.1 base score 7.5 (HIGH). Root cause: authentication bypass in phpcgi interface. Exploitation status in connected data indicates a PoC exists; NVD entry does not confirm active exploits. Docu...
PT-2022-27733 · D Link · D-Link Dir-869
Name of the Vulnerable Software and Affected Versions: D-Link DIR-869 version DIR869Ax FW102B15 Description: The issue is related to Authentication Bypass via phpcgi. Recommendations: For D-Link DIR-869 version DIR869Ax FW102B15, as a temporary workaround, consider restricting access to the phpcg...
PT-2022-27888 · Tenda · Tenda F1203
Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the speed dir parameter at the "/goform/SetSpeedWan" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider...
CVE-2022-46076
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
CVE-2022-44832
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
CVE-2022-44832
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
Command injection
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
CVE-2022-44832
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
CVE-2022-44832
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
CVE-2022-44832: Improper Neutralization of Special Elements used in a Command
D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...
D-Link DIR-3040 command injection vulnerability
D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...
PT-2022-27320 · D Link · D-Link Dir-3040
Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 120B03 Description: A command injection issue was discovered in the D-Link DIR-3040 device. The vulnerability is related to the SetTriggerLEDBlink function, which allows for command injection. Recommendations: For D-Li...
CVE-2022-44832
CVE-2022-44832 applies to the D-Link DIR-3040 router, specifically firmware 120B03, where the SetTriggerLEDBlink function fails to filter crafted input and enables command injection. Public sources across NVD/Red Hat/CNVD/CNVD variants consistently describe an arbitrary command execution vulnerab...
D-Link DIR-823G Router Command Injection
The vulnerability of the D-Link DIR-823G router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands usin...