PT-2024-3755 · D Link · D-Link Dir-619L Rev.B

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: The issue is related to a buffer overflow vulnerability in the /bin/boa component of the D-Link DIR-619L Rev.B router, specifically via the "goform/formWPS" endpoint, where the webpage paramet...

D-Link DIR-845L Cross-Site Scripting Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. A cross-site scripting vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which can be exploited by an attacker to execute script in the victim's web browser using a specially crafted URL...

PT-2024-3754 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L Rev.B version 2.06B1 Description: A buffer overflow issue in the /bin/boa binary via the formWlanGuestSetup function allows remote authenticated users to trigger a denial of service DoS through the webpage parameter. This...

PT-2024-3674 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module of the D-Link DIR-822+ wireless router's firmware. This vulnerability can be exploited b...

D-Link DIR-823G Null Pointer Dereference Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. The D-Link DIR-823G suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial...

CVE-2024-33111

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-33113

D-LINK DIR-845L =v1.01KRb03 is vulnerable to Information disclosurey via bscsmsinbox.php...

CVE-2024-33111

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...

CVE-2024-33113

D-LINK DIR-845L =v1.01KRb03 is vulnerable to Information disclosurey via bscsmsinbox.php...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

D-LINK DIR-845L security vulnerabilities

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-LINK DIR-845L v1.01KRb03 version and earlier versions, which stems from an information disclosure issue in bscsmsinbox.php...

CVE-2024-33113

D-LINK DIR-845L =v1.01KRb03 is vulnerable to Information disclosurey via bscsmsinbox.php...

D-Link DIR-823G Router DoS

The vulnerability of the uploadfirmware.cgi function in D-Link DIR-823G router microprogramming software is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

CVE-2024-33111: Improper Neutralization of Input During Web Page Generation

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...

CVE-2024-33110: Improper Authentication

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-33113: Improper Neutralization of Special Elements used in a Command

D-LINK DIR-845L =v1.01KRb03 is vulnerable to Information disclosurey via bscsmsinbox.php...

CVE-2024-33111

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...

CVE-2024-33110

The D-Link DIR-845L router (v1.01KRb03 and before) is vulnerable to a Permission Bypass within the getcfg.php component. The root cause is an access control flaw when the component processes the ** he_GLOBALS["AUTHORIZED_GROUP"]** parameter. A remote attacker can exploit this flaw to bypass secur...