D-Link DIR-816 Command Injection Vulnerability (CNVD-2021-30000)

The D-Link DIR-816 is a wireless AC750 dual-band router. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05. The vulnerability stems from the use of HTTP request parameters for command string construction in the handler function of /goform/addRouting. An attacker c...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

CVE-2021-27114

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

Command injection

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

CVE-2021-27114

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

Stack overflow

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27114

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27114

CVE-2021-27114 affects D-Link DIR-816 A2 devices (version 1.10 B05). The vulnerability is a stack-based buffer overflow in the handler function of the /goform/addassignment route, triggered by very long text input in the s_ip and s_mac fields, which could overwrite the return address. This is doc...

CVE-2021-27113

The CVE-2021-27113 entry concerns D-Link DIR-816 A2 devices (firmware 1.10 B05) where an HTTP request parameter is used to build a command string in the /goform/addRouting handler, enabling Command Injection via Shell metacharacters. Documented impact is severe (CW network-facing, with high likel...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

PT-2021-17250

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: An issue was discovered where an HTTP request parameter is used in command string construction within the handler function of the "/goform/addRouting" route. This could lead to command injection...

PT-2021-17251

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: An issue was discovered that could lead to a Stack-Based Buffer Overflow. This occurs when a very long text entry is made for the s ip and s mac fields within the handler function of the...

Unauthorized Access Vulnerability in DIR-816 750M11AC Wireless Router

The AUO DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. The DIR-816 750M11AC wireless router suffers from an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...

D-Link DIR-816 A2 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless AC750 dual-band router. A command injection vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05. The vulnerability stems from the use of HTTP request parameters for command string construction in the handler function of /goform/addRouting. An attacker c...

CVE-2021-27114: Out-of-bounds Write

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'sip" and "smac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address...

CVE-2021-27113: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

UBUNTU-CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

Command Execution Vulnerability in DIR-816

The DIR-816 is a wireless router under the AUO D-Link brand. The DIR-816 suffers from a command execution vulnerability that can be exploited by an attacker to gain server control privileges...