CVE-2021-46457

The CVE-2021-46457 entry relates to D-Link DIR-823-Pro (v1.0.2). A command-injection vulnerability exists in the function ChgSambaUserSettings, allowing an attacker to execute arbitrary commands via the samba_name parameter. Connected sources (CNVD/CNNVD and CVE records) confirm the affected devi...

D-Link Dir-823-Pro command injection vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

D-Link Dir-823-Pro command injection vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 contains a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the stationaccessenable parameter...

D-Link Dir-823-Pro command injection vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 has a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the ApCliKeyStr parameter...

D-Link Dir-823-Pro command injection vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the staticroutelist parameter...

D-Link DIR-878 command injection vulnerability

D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company in China. The D-Link DIR-878 is vulnerable to an operating system command injection vulnerability, which stems from the inclusion of a command injection vulnerability in a system function. An attacker could exploit the...

CVE-2021-46452: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

CVE-2021-46454: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability allows attackers to execute arbitrary commands via the ApCliKeyStr parameter...

CVE-2021-46456: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl0.0maclist parameter...

D-Link Dir-823-Pro command injection vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

D-Link Dir-823-Pro command injection vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro 1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

CVE-2021-46455: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the stationaccessenable parameter...

D-Link DIR-882 command injection vulnerability

D-Link DIR-882 is a wireless router from D-Link Taiwan, China. The D-Link DIR-882 suffers from an operating system command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

D-Link DIR-882 command injection vulnerability

The D-Link DIR-882 is a gigabit enterprise router from China Youxun D-Link. The D-Link DIR-882 suffers from a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

CVE-2021-46453: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability allows attackers to execute arbitrary commands via the staticroutelist parameter...

CVE-2021-46457: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability allows attackers to execute arbitrary commands via the sambaname parameter...

PT-2022-15950 · Mozilo · Mozilo

Name of the Vulnerable Software and Affected Versions: mozilo version 2.0 Description: The issue allows directory traversal attacks via the curent dir parameter. Recommendations: For version 2.0, consider restricting access to the curent dir parameter to minimize the risk of exploitation...

PT-2022-1553

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the ChgSambaUserSettings function. This vulnerability allows attackers to execute arbitrary commands via the samba name parameter. The...

PT-2022-1550

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetWLanACLSettings function. This vulnerability allows attackers to execute arbitrary commands via the wl0.0 maclist parameter. The...

PT-2022-1555

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetWLanApcliSettings function. This vulnerability allows attackers to execute arbitrary commands via the ApCliKeyStr parameter. The...