CVE-2023-51631 D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerabilit...

CVE-2023-51631

The CVE-2023-51631 issue affects D-Link DIR-X3260 routers, specifically the prog.cgi SetUsersSettings handler. The vulnerability is a stack-based buffer overflow in the prog.cgi binary handling HNAP requests to the lighttpd server (ports 80/443), caused by improper validation of a user-supplied s...

CVE-2024-33345

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of uploadfirmware.cgi, which allows remote attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-33345

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of uploadfirmware.cgi, which allows remote attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-3294 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a Null-pointer dereference in the main function of upload firmware.cgi, which can be exploited by remote attackers to cause a Denial of Service DoS via a crafted input...

D-Link DIR-823G security vulnerabilities

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-823G version A1V1.0.2B05, which stems from the presence of a null pointer dereference that can cause a denial of service DoS by a remote attacker...

CVE-2024-33345

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of uploadfirmware.cgi, which allows remote attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-33345: NULL Pointer Dereference

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of uploadfirmware.cgi, which allows remote attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

D-Link DIR-822 security vulnerabilities

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the ChgSambaUserSettings function of prog.cgi, allowing remote attackers to execute arbitrary commands...

CVE-2024-33343

The D-Link DIR-822+ wireless router (version V1.0.5 ) is vulnerable to a command injection flaw within the ChgSambaUserSettings() function of the prog.cgi script. The root cause is the failure to properly sanitize special elements used in the operating system's processing of the samba_name parame...

CVE-2024-33344

The D-Link DIR-822+ wireless router, specifically version V1.0.5 , contains a command injection vulnerability in the ftext() function of the upload_firmware.cgi script. The root cause is the failure to neutralize special elements used in the operating system's command when processing the UPLOAD_F...