10271 matches found
D-Link DIR-816 security vulnerabilities
The D-Link DIR-816 and D-Link DIR-816 A2 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which originates from the ability to initialize a network without authenticating via /goform/wizardend...
D-Link DIR-816 access control error vulnerability
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 firmware A2v1.10CNB04.img image, which stems from its /goform/setMAC component that allows an attacker to reset the network without authentication...
D-Link DIR-816: Operating System Command Injection Vulnerability
The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/Diagnosis, where setnum is spliced and then executed after the...
PT-2022-23828 · D Link · D-Link Dir-878 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 versions A2 v1.10CNB04 D-Link DIR-878 version DIR 878 FW1.30B08 Description: A command injection issue occurs in the /goform/Diagnosis endpoint, where the setnum variable is spliced into v10 by snprintf, allowing system executi...
PT-2022-23825 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2 v1.10CNB04.img Description: The network can be initialized without authentication via the "/goform/wizard end" API endpoint. Recommendations: For D-Link DIR-816 version A2 v1.10CNB04.img, as a temporary workaround,...
CVE-2022-36619: Missing Authentication for Critical Function
In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...
CVE-2022-37129: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
CVE-2022-36620: Improper Validation of Specified Quantity in Input
D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...
PT-2022-23824 · D Link · Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 A2 version 1.10CNB04 Description: The issue is related to command injection via the /goform/NTPSyncWithHost API endpoint. This allows for potential malicious commands to be executed. There is no information provided about the...
CVE-2022-37125: Improper Neutralization of Special Elements used in a Command
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
CVE-2022-37128: Improper Initialization
In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...
CVE-2022-37130: Improper Neutralization of Special Elements used in an OS Command
In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...
CVE-2022-37130
In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...
PT-2022-23826 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: The issue is related to Command Injection via the "/goform/SystemCommand" API endpoint. When a user passes in the command parameter, it is spliced into byte 4836B0 by snprintf, and then...
D-LINK DIR-818LW Code Execution
The vulnerability of the ssdpcgimain function in the microprogramming software for D-LINK DIR-818LW is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link DIR-845 authorization issue vulnerability
The D-Link DIR-845 is a wireless router from China-based AUO D-Link. An authorization issue vulnerability exists in the D-Link DIR-845 v1.00-v1.03 versions, which stems from a static default credentials vulnerability contained in /etc/init0.d/S80telnetd.sh...
D-Link DIR-845 code injection vulnerability
The D-Link DIR-845 is a wireless router from China's AUO D-Link. A code injection vulnerability exists in the D-Link DIR-845 versions v1.00 through v1.03, which originates from /htdocs/upnpinc/gena.php containing command injection...
PT-2022-23608 · D Link · D-Link Dir-845L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L A1 versions 1.00 through 1.03 Description: The issue concerns command injection via the "/htdocs/upnpinc/gena.php" API endpoint. This allows for potential malicious commands to be executed. Recommendations: For versions 1.00...
