CVE-2022-44806

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow...

CVE-2022-44801

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

CVE-2022-44801

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

Buffer overflow

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow...

Command injection

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function execute...

Improper access control

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

Buffer overflow

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

Buffer overflow

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44801

Affected product: D-Link DIR-878 router (firmware 1.02B05). Issue: incorrect access control allowing authentication bypass (e.g., login with a blank password) that could compromise confidentiality, integrity, and availability. Root cause: access control error in DIR-878 firmware. Exploitation sta...

CVE-2022-44804

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44807

The CVE-2022-44807 entry concerns D-Link DIR-882 firmware versions 1.10B02 through 1.20B06. A buffer overflow in the webGetVarString() function is described as the root cause, allowing potential impact to confidentiality, integrity, and availability. Connected sources confirm the vulnerable compo...

CVE-2022-44806

CVE-2022-44806 affects D-Link DIR-882 firmware versions 1.10B02 through 1.20B06. The vulnerability is a buffer overflow in the firmware (root cause: missing length validation in the wan_wan_phy_ifname path of function sub_46D180), enabling a remote attacker to potentially cause denial of service ...

CVE-2022-44807

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

D-Link DIR-882 buffer error vulnerability

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from the lack of length validation of input data in the sub46D180 function wanwanphyifname parameter, which could be exploited by an...

CVE-2022-44801

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

CVE-2022-44806

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow...

CVE-2022-44808

Summary: CVE-2022-44808 affects D-Link DIR-823G with firmware 1.02B03. The flaw is a command injection in the HNAP1 interface where an untrusted command is executed before the HNAP API function processes the request, enabling remote command execution via crafted requests. Affected software/compon...

CVE-2022-44804

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44807: Out-of-bounds Write

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

CVE-2022-44808: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function execute...