D-Link DIR-853 Password Parameter Buffer Overflow Vulnerability

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

PT-2025-16978 · D Link · D-Link Dir 832

Name of the Vulnerable Software and Affected Versions: D-Link DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the target addr key value and the 0x41710c function. Recommendations: For D-Link DIR 832x version 240802, as a...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

D-Link DIR-853 A1 Router DoS

The vulnerability in the prog.cgi script of the SetQuickVPNSettings module of the D-Link DIR-853 A1 router operating system is related to buffer overflow during the processing of the PSK parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link DIR-859 security vulnerabilities

The D-Link DIR-859 is a wireless router from China AUO D-Link. A security vulnerability exists in the D-Link DIR-859 v1.05 and earlier versions. An attacker can exploit this vulnerability to obtain a username and password by spoofing a post request to the /getcfg.php page...

CVE-2024-57045: Improper Authentication

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

PT-2025-6734 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 router versions A3 1.05 and earlier Description: A vulnerability in the D-Link DIR-859 router permits unauthorized individuals to bypass authentication. An attacker can obtain a user name and password by forging a post request ...

CVE-2025-1392

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

CVE-2025-1392

The CVE-2025-1392 entry applies to D-Link DIR-816 (firmware 1.01TO). The vulnerability is an XSS flaw in handling the SSID parameter via /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic, which can be triggered remotely. Multiple connected sources confirm the issue is t...

CVE-2025-1392 D-Link DIR-816 index.html cross site scripting

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

CVE-2025-1392 D-Link DIR-816 index.html cross site scripting

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

D-Link DIR-853 SetDynamicDNSSettings Module Buffer Overflow Vulnerability

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetDynamicDNSSettings module not properly handling user input. No details of the vulnerability are provided at this time...

D-Link DIR-853 SetSysEmailSettings Module Buffer Overflow Vulnerability

The D-Link DIR-853 is a router from China's AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the AccountPassword parameter in the SetSysEmailSettings module not properly handling user input. No details of the vulnerability are provided at this time...

D-Link DIR-853 SetIPv6PppoeSettings Module Buffer Overflow Vulnerability

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module not properly handling user input. No detailed vulnerability details are provided at this...

CVE-2025-1392: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

PT-2025-6916 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version 1.01TO Description: A vulnerability has been found in the D-Link DIR-816, affecting an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G basic. The manipulation of...

D-Link DIR-816 code injection vulnerability

The D-Link DIR-816 is a wireless router from China's AUO D-Link. A code injection vulnerability exists in the D-Link DIR-816 version 1.01TO, which stems from the fact that incorrect operation of the parameter SSID can lead to cross-site scripting attacks. The vulnerability can be exploited by an...