D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing sub-elements of a StaticRouteIPv4Data element, where the process does not properly validate before executing a...

CVE-2022-43623

CVE-2022-43623 affects D-Link DIR-1935 1.03. The vulnerability is a command-injection flaw in the web management portal’s handling of the SetWebFilterSetting request, specifically when parsing the WebFilterURLs element. A user-supplied string is not properly validated before being used to execute...

CVE-2022-43630

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of http requests to the web management portal. When...

CVE-2022-43644

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on T...

CVE-2022-43624

Affected product: D-Link DIR-1935, firmware version 1.03. The vulnerability (CVE-2022-43624) is a command injection flaw in the web management portal, triggered by parsing subelements inside StaticRouteIPv6List during SetStaticRouteIPv6Settings handling. The issue allows network-adjacent attacker...

D-Link DIR-1935: Operating System Command Injection Vulnerability

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. The D-Link DIR-1935 suffers from an operating system command injection vulnerability that originates when parsing sub-elements of the SetSysEmailSettings element, where the process does not properly validate before executing a...

CVE-2022-43645

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IVI plugin for the xupnpd service, which listens on TCP po...

CVE-2022-43631

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43628

Affected product: D-Link DIR-1935 (firmware 1.03). Vulnerable component: web management portal’s SetIPv6FirewallSettings handling of IPv6FirewallRule elements. Root cause: improper validation of a user-supplied string before it is used in a system call, enabling arbitrary code execution with root...

D-Link DIR-1935 security vulnerabilities

The D-Link DIR-1935 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-1935 that stems from a failure to properly validate the length of user-supplied data before copying it into a fixed-length buffer when parsing NetMask elements...

CVE-2022-43625: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43630

CVE-2022-43630 affects D-Link DIR-1935 (firmware ~1.03). The vulnerability is a stack-based buffer overflow in the handling of SOAPAction header in the web management portal, exploitable by network-adjacent attackers without authentication to execute code as root. The issue is documented as a rem...

D-Link DIR-3040 security vulnerabilities

D-Link DIR-3040 is a router from China Youxun D-Link Inc. The D-Link DIR-3040 is vulnerable to a buffer overflow vulnerability caused by a failure to properly boundary check the MiniDLNA service. An attacker could exploit this vulnerability to execute arbitrary code on the system...

CVE-2022-43619: Use of Externally-Controlled Format String

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43632

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43633

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43645

CVE-2022-43645 affects D-Link DIR-825 (version 1.0.9/EE). The root cause is a lack of validation of a user-supplied string in the IVI plugin for the xupnpd service, which listens on TCP port 4044, enabling execution of arbitrary code via a system call. The vulnerability allows network-adjacent at...

CVE-2022-43629: Improper Neutralization of Special Elements used in an OS Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43632

CVE-2022-43632 affects D-Link DIR-1935 firmware 1.03. The flaw is in SetQoSSettings QoSInfo parsing: unvalidated user-supplied data is used in a system call, allowing network-adjacent attackers to achieve code execution as root. Exploitation details are documented by ZDI (ZDI-22-1504) and other f...

D-Link DIR-2150: Operating System Command Injection Vulnerability

The D-Link DIR-2150 is an AC2100 specification wireless router that supports dual-band 2.4GHz and 5GHz wireless transmission, provides four Gigabit wired interfaces, and has a maximum theoretical transfer rate of up to 2100Mbps. The D-Link DIR-2150 suffers from an operating system command injecti...