CVE-2017-14428

CVE-2017-14428 concerns the D-Link DIR-850L, specifically REV. A (firmware up to FW114WWb07_h2ab_beta1) and REV. B (firmware up to FW208WWb02). The issue is that 0666 permissions on /var/run/hostapd* create local access exposure, enabling an attacker with local access to interact with hostapd run...

CVE-2017-14429

CVE-2017-14429 affects the D-Link DIR-850L router family (Rev. A and Rev. B) where the DHCP client vulnerability stems from /etc/services/INET/inet_ipv4.php mishandling shell metacharacters. This leads to unauthenticated remote code execution as root and impacts generated files such as WAN-1-udhc...

CVE-2017-14430

The CVE-2017-14430 issue affects D-Link DIR-850L, Rev. A (firmware FW114WWb07_h2ab_beta1) and Rev. B (firmware FW208WWb02). The vulnerability allows remote attackers to cause a denial of service (daemon crash) via crafted LAN traffic. The available connected documents confirm the affected product...

PT-2017-13459 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the presence of a cross-site scripting XSS flaw in the action...

PT-2017-13469 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of the /var/etc/hnapasswd file, which has 0666 permissions, indicating a potentia...

PT-2017-13460 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue concerns a problem where an attack can be performed. The estimated number of potentially affected devices worldwide is not available. Details about real-worl...

PT-2017-13465 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the D-Link NPAPI extension, which fails to verify X.509 certificates from SSL servers. This allow...

PT-2017-13463 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the D-Link NPAPI extension used in D-Link DIR-850L devices, which participates in mydlink Cloud...

PT-2017-13472 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of /var/run/hostapd files, which have 0666 permissions. Recommendations: For D-Li...

PT-2017-13458 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue concerns a problem where an attack can be performed. The action parameter in the /htdocs/web/shareport.php endpoint is vulnerable. Recommendations: For D-Lin...

PT-2017-13466 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the use of a hardcoded private key in the /etc/stunnel.key file across different installations,...

PT-2017-13467 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue allows remote attackers to change the DNS configuration via a series of requests, due to the failure to prevent unauthenticated nonce-guessing attacks in the...

PT-2017-13457 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue concerns a problem where an attack can be performed. The action parameter in the /htdocs/web/wpsacts.php endpoint is vulnerable. Recommendations: For D-Link...

PT-2017-13471 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of the /var/run/storage account root directory, which has 0666 permissions...

PT-2017-13461 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the register send.php file, which does not require authentication. This can lead to unintended enrollment in mydlink Cloud Services. Recommendations: For D-Lin...

PT-2017-13474 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted LAN traffic...

PT-2017-13470 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of the /var/etc/shadow file, also known as the /etc/shadow symlink target, which...

D-link ten vulnerabilities 0Day studies attach detailed procedures-vulnerability warning-the black bar safety net

Security researcher Pierre Kim recently revealed the D-Link DIR 850LAC1200-Type Dual-Band Gigabit cloud router is exposed 10 a safety score comprisesXSSattack invasion, shortage of proper firmware cover, back door and root mention the right. Here are 10 Safety scores are: Firmware to. The firmwar...

CVE-2017-14430: Improper Input Validation

D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allow remote attackers to cause a denial of service daemon crash via crafted LAN traffic...

CVE-2017-14429: Improper Neutralization of Special Elements used in an OS Command

The DHCP client on D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 and REV. B with firmware through FW208WWb02 devices allows unauthenticated remote code execution as root because /etc/services/INET/inetipv4.php mishandles shell metacharacters, affecting generated files such as...