CVE-2021-46314

CVE-2021-46314 targets D-Link DIR-846 routers, with the flaw in HNAP1/control/SetNetworkTomographySettings.php. The issue is a backtick-based command injection in domain-name validation, enabling remote command execution over the network. Public sources (NVD) assign a CVSS v3.1 base score of 9.8 ...

CVE-2021-45382: Improper Neutralization of Special Elements used in an OS Command

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End ...

PT-2022-1646

Name of the Vulnerable Software and Affected Versions D-link DIR-810L versions all D-link DIR-820L/LW versions all D-link DIR-826L versions all D-link DIR-830L versions all D-link DIR-836L versions all Description A Remote Command Execution vulnerability exists in the DDNS function of the affecte...

PT-2022-1647

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 versions DIR846A1 FW100A43.bin through DIR846enFW100A53DLA-Retail.bin Description The issue is related to insufficient argument validation in the HNAP1/control/SetNetworkTomographySettings.php script, allowing a remote attacker ...

CVE-2021-46315: Improper Neutralization of Special Elements used in an OS Command

Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...

PT-2022-1648

Name of the Vulnerable Software and Affected Versions D-Link Router DIR-846 versions DIR846A1 FW100A43.bin through DIR846enFW100A53DLA-Retail.bin Description A Remote Command Execution RCE issue exists due to insufficient argument validation in the SetWizardConfig.php script within the...

D-Link DIR-846 安全漏洞

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

PT-2022-1645

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 versions DIR846A1 FW100A43.bin through DIR846enFW100A53DLA-Retail.bin Description The issue is related to insufficient argument checking in the firmware of D-Link DIR-846 routers, allowing remote attackers to execute arbitrary...

D-Link DIR-846 安全漏洞

The D-Link DIR-846 is a wireless router from Taiwan, China-based AUO D-Link. An operating system command injection vulnerability exists in the D-Link DIR-846 device, which stems from the product's failure to effectively filter the \ and backquotes in the ssid0 and ssid1 parameters. An attacker ca...

D-Link DIR-823-Pro SetStationSettings Command Execution

The vulnerability of the implementation of the SetStationSettings function in the microprogrammed software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the stationaccessenable parameter. Exploiting this vulnerability allows a...

D-Link DIR-823-Pro Wireless Router Command Execution

The vulnerability of the implementation of the SetWLanApcliSettings function in the microprogramming software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the ApCliKeyStr parameter. Exploiting this vulnerability allows a remote...

D-Link DIR-823-Pro Arbitrary Command Execution

The vulnerability of the SetStaticRouteSettings function in D-Link DIR-823-Pro wireless router microprogramming software is related to insufficient cleaning of input data during the processing of the staticroutelist parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

D-Link DIR-X1860 has unspecified vulnerabilities

The D-Link Dir-X1860 is a dual-band router from D-Link China.A security vulnerability exists in the D-Link DIR-X1860, which stems from a reflected cross-site scripting attack in the D-Link DIR-X1860 web application prior to v1.10WWB09 Beta, which can be exploited by an attacker to sending a...

D-Link Dir-X1860 Denial of Service Vulnerability (CNVD-2022-38536)

The D-Link Dir-X1860 is a dual-band router from D-Link, a Chinese company. The D-Link DIR-X1860 suffers from a denial-of-service vulnerability that stems from the lack of HTTP packet authentication and filtering in the software web application leading to HTTP smuggling attacks, which can be...

CVE-2021-41445

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim...

CVE-2021-41445

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim...

CVE-2021-41445

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim...

Cross site scripting

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim...

CVE-2021-41445

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim...

CVE-2021-41445

CVE-2021-41445 affects D-Link DIR-X1860 web application. Prior to v1.10WWB09 Beta, there is a reflected cross-site scripting vulnerability allowing a remote unauthenticated attacker to execute code on the victim’s device by persuading the user to visit a crafted URL. Exploitation would occur via ...