D-Link DIR-816 A2: Buffer error vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the wizardstep4pskpwd parameter of /goform/form2WizardStep4...

D-Link DIR-816 A2: Buffer error vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the pskValue parameter of the setSecurity function...

D-Link DIR-816 A2: Buffer error vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the srcip parameter of /goform/form2IPQoSTcAdd...

CVE-2022-42998

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

CVE-2022-43001

CVE-2022-43001 affects D-Link DIR-816 A2, version 1.10 B05, with a stack overflow in the setSecurity function’s pskValue parameter. The vulnerability is documented with a high-impact CVSS v3.1 score (9.8, CRITICAL) across network attack vector, no user interaction, and impacts to confidentiality,...

PT-2022-5270 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the /goform/form2WizardStep4 component of the D-Link DIR-816 A2 router's firmware. This can be exploited via the wizardstep4 pskpwd parameter,...

CVE-2022-42999

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

CVE-2022-43003

CVE-2022-43003 affects D-Link DIR-816 A2 router with firmware 1.10 B05. The vulnerability is a stack overflow in the setRepeaterSecurity function triggered via the pskValue parameter, impacting confidentiality, integrity, and availability (CVSS v3.1: 9.8). Connected documents corroborate a buffer...

CVE-2022-42999

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

CVE-2022-43000

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4pskpwd parameter at /goform/form2WizardStep4...

CVE-2022-43002

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54pskpwd parameter at /goform/form2WizardStep54...

CVE-2022-43001

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function...

CVE-2022-42998: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

CVE-2022-43000: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4pskpwd parameter at /goform/form2WizardStep4...

PT-2022-5271 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to command injection vulnerabilities. These vulnerabilities can be exploited via the admuser and admpass parameters at the "/goform/setSysAdm" API endpoint. The vulnerabilit...

PT-2022-5272 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the D-Link DIR-816 A2 router's firmware, which can be triggered via the srcip parameter at the "/goform/form2IPQoSTcAdd" API endpoint. This can...

CVE-2022-43003: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function...

CVE-2022-42999: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

PT-2022-5268 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the setSecurity function, specifically via the pskValue parameter. This can potentially allow a remote attacker to execute arbitrary code due to a...

PT-2022-5677 · D Link · D-Link Dir-3060

Name of the Vulnerable Software and Affected Versions: D-Link DIR3060 version DIR3060A1 FW111B04.bin Description: The issue is related to a buffer overflow in the D-Link DIR-3060 router's firmware. Specifically, the FUN 0049ac18 function is vulnerable due to the lack of size checking for input...