PT-2023-2991

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this issue,...

PT-2023-3004

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description The issue is related to the implementation of the LoginPassword function in the D-Link DIR-2150 router's software, which allows for authentication bypass. This can be exploited by a...

PT-2023-3003

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this issue,...

PT-2023-3002

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description This issue allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. The specific flaw exists within the SOAP API interface, whi...

PT-2023-3005

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this issue,...

PT-2023-3008

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description The issue is related to the SetSysEmailSettings function in the D-Link DIR-2150 router's software, which lacks proper input validation. This allows a remote attacker to execute...

PT-2023-3006

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. The specific flaw exists within the SOAP API interface,...

PT-2023-2985

Name of the Vulnerable Software and Affected Versions D-Link DIR-2150 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this issue,...

D-Link DIR-823G Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G version V1.0.2B05, which originates from a boundary error in the NewPassword parameter parameter when handling untrusted input. A remote attacker could exploit this...

D-Link DIR-878 <= 1.30B08 Multiple Command Injection Vulnerabilities (Feb 2022)

D-Link DIR-878 devices are prone to multiple command injection vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-819 DoS Vulnerability

D-Link DIR-819 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-823G buffer error vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G version V1.0.2B05, which originates from a boundary error in the NewPassword parameter parameter when handling untrusted input. A remote attacker could exploit this...

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

Cross site request forgery (csrf)

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

CVE-2022-40946

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

CVE-2022-40946: Uncontrolled Resource Consumption

On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the systoken parameter in a cgi-bin/webproc?getpage=html/index.html request...

CVE-2022-40946

CVE-2022-40946 affects D-Link DIR-819 (Firmware 1.06, Hardware A1). A DoS can be triggered via the sys_token parameter in the CGI endpoint cgi-bin/webproc?getpage=html/index.html, leading to resource exhaustion. CVSS v3.1 base score 7.5 (NETWORK, LOW complexity, NONE privileges, U availability im...

PT-2023-2749 · D Link · D-Link Dir 819

Name of the Vulnerable Software and Affected Versions: D-Link DIR-819 version 1.06 Description: The issue is related to incorrect resource cleanup, allowing a remote attacker to trigger a Denial of Service via a specially crafted request to the "cgi-bin/webproc?getpage=html/index.html" endpoint...