CVE-2019-8316: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8313: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8317: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8312: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8314: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8318: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8319: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8315: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

PT-2019-1617

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to insufficient input validation in the SetIPv6FirewallSettings API function, allowing a remote attacker to execute arbitrary code. This can be achieved through a Command Injection...

PT-2019-1619

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue allows a remote attacker to execute arbitrary code and gain a root shell through a Command Injection vulnerability. This occurs when the twsystem function is called with untrusted input from...

PT-2019-1622

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection vulnerability in the SetSysEmailSettings API function, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when the...

PT-2019-1620

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs due to insufficient input validation in the SetWebFilterSettings API...

PT-2019-1618

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to insufficient input validation in the SetQoSSettings function of the D-Link router's firmware, allowing a remote attacker to execute arbitrary code. This can be achieved through ...

PT-2019-1621

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description An issue allows a remote attacker to execute arbitrary code and get a root shell through a Command Injection vulnerability. This occurs when any HNAP API function triggers a call to the system function...

PT-2019-1623

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection vulnerability in the SetStaticRouteIPv4Settings API function, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when th...

PT-2019-1616

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when the twsystem function is called with untrusted input from the...

CVE-2019-7736

D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101...

PT-2019-1521

Name of the Vulnerable Software and Affected Versions D-Link DIR-600M C1 version 3.04 Description The issue is related to weaknesses in the authentication procedure of the D-Link DIR-600M C1 router's firmware. An attacker can exploit this issue by making a direct request to the "wan.htm" page,...

CVE-2019-7736: Direct Request

D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101...

D-Link DIR-850L FW < 1.21B07 Authentication Bypass Vulnerability

D-Link DIR-850L is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...