D-Link DIR-880 security vulnerabilities

The D-Link DIR-880 is a router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-880 version A1FW107WWb08, which originates from a buffer overflow vulnerability in function FUN0001be68...

CVE-2023-39669

CVE-2023-39669 involves a NULL pointer dereference in D-Link DIR-880 A1_FW107WWb08, specifically the function FUN_00010824. The flaw can potentially enable a remote attacker to cause a denial of service. Affected software is D-Link DIR-880 A1 with FW107WWb08 (A1 revision). The PT-security entry n...

CVE-2023-39666

D-Link DIR-842 fwrevA1-02eumulti20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack120 and acStack220 parameters...

D-Link DIR-880 security vulnerabilities

The D-Link DIR-880 is a router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-880 version A1FW107WWb08, which originates from a buffer overflow vulnerability in the function fgets...

CVE-2023-39666

CVE-2023-39666 affects the D-Link DIR-842 firmware fw_revA_1-02_eu_multi_20151008. The vulnerability consists of multiple buffer overflows in the fgets function exposed via the acStack_120 and acStack_220 parameters. CVSS 3.1/3.1 base score 9.8 (CRITICAL) with network attack vector, no user inter...

CVE-2023-39674: Buffer Copy without Checking Size of Input

D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39674

CVE-2023-39674 affects D-Link DIR-880 A1_FW107WWb08, where a buffer overflow in the firmware’s fgets function is identified. The root cause is a flawed handling of input in the affected component, enabling potential impact on confidentiality, integrity, and availability (per CVSS 3.1 metrics: HIG...

PT-2023-4960 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack in the inet ntoa function. This can be exploited by a remote attacker to cause a buffer overflow. The buffer overflow...

PT-2023-4959 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack in the FUN 0000acb4 function of the D-Link DIR-868L router's firmware. This can be exploited by a remote attacker to cau...

PT-2023-4453 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a buffer overflow in the fgets function of the D-Link DIR-880 router's firmware. This could allow a remote attacker to execute arbitrary code. Recommendations: For D-Link DIR-8...

PT-2023-4468 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a NULL pointer dereference in the FUN 00010824 function. This can potentially allow a remote attacker to cause a denial of service. Recommendations: For D-Link DIR-880 A1...

PT-2023-4958 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack. This can be exploited by a remote attacker to cause a buffer overflow via the acStack 50 parameter. Recommendations: Fo...

dir-shop.cz Cross Site Scripting vulnerability OBB-3583761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-5237 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-859 versions A1 1.05 through A1 1.06B01 Beta01 Description: The issue is related to a command injection vulnerability via the lxmldbc system function at the "/htdocs/cgibin" endpoint. This vulnerability is associated with the failu...

D-Link DIR-885L Authentication Bypass Vulnerability

The D-Link DIR-885L is a wireless router from China-based AUO D-Link. The D-Link DIR-885L suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in phpcgi, which can be exploited by an attacker to bypass authentication...

D-Link DIR-895 Authentication Bypass Vulnerability

The D-Link DIR-895 is a wireless router from China's AUO D-Link. The D-Link DIR-895 suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in the phpcgimain function in cgibin, which can be exploited by an attacker to bypass authentication...

D-Link DIR-859 Authentication Bypass Vulnerability

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

D-Link DIR-895 Router Privilege Escalation

The vulnerability of the phpcgimain function in the D-Link DIR-895 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

D-Link DIR-859 Router Privilege Escalation

The vulnerability of the phpcgimain function in the D-Link DIR-859 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

CVE-2023-36092

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...