CVE-2023-44829: Buffer Copy without Checking Size of Input

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-44839

CVE-2023-44839 affects D-Link DIR-823G (A1V1.0.2B05). The SetWLanRadioSecurity function’s Encryption parameter has a buffer overflow vulnerability that allows a crafted input to cause a Denial of Service. Documents indicate potential remote exploitation; no official patch details are provided in ...

CVE-2023-44837

CVE-2023-44837 affects D-Link DIR-823G (A1V1.0.2B05). The vulnerability is a buffer overflow in the SetWanSettings function, triggered via the Password parameter, allowing a crafted input to cause Denial of Service. The CVE’s metrics indicate NETWORK attack vector and HIGH impact to availability,...

CVE-2023-44832

CVE-2023-44832 affects D-Link DIR-823G, specifically version A1V1.0.2B05, where the SetWanSettings function is vulnerable to a buffer overflow via the MacAddress parameter. The consequence documented is a Denial of Service (DoS) from crafted input. The CVSS data in the entry indicates a NETWORK a...

CVE-2023-44836

CVE-2023-44836 concerns the D-Link DIR-823G, specifically version A1V1.0.2B05, with a buffer overflow in the SetWLanRadioSettings function triggered by the SSID parameter. The vulnerability allows a remote attacker to induce a Denial of Service. The NVD entry lists a CVSSv3.1 base score of 7.5 (N...

CVE-2023-44831

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-44834

CVE-2023-44834 affects the D-Link DIR-823G router, specifically version A1V1.0.2B05 . The issue is a buffer overflow in SetParentsControlInfo() when processing the StartTime parameter , caused by improper boundary handling. Impact stated in sources: attacker-controlled input can trigger a Denial ...

PT-2023-5768 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetWLanRadioSettings function when handling the Type parameter. This allows attackers to cause a Denial of Service DoS via a crafted input. It m...

CVE-2023-44832: Buffer Copy without Checking Size of Input

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2023-44835

CVE-2023-44835 affects D-Link DIR-823G (A1V1.0.2B05). The issue is a buffer overflow in the SetParentsControlInfo function triggered via the Mac parameter, enabling a crafted input to cause a Denial of Service. The root cause is improper validation/boundary checking in that function. Public detai...

Exploit for CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 Authenticated Remote Code E...

PT-2023-6110 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi binary,...

PT-2023-5896 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

PT-2023-5853 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to the SetSysEmailSettings function of the D-Link DIR-X3260 Wi-Fi router's firmware, which is associated with insufficient input data cleaning. This can be...

PT-2023-5697 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the prog.cgi component of D-Link DIR-X3260 Wi-Fi routers, allowing attackers to execute arbitrary code. This can be exploit...

PT-2023-6105 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

PT-2023-5852 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to the SetSysEmailSettings function of the D-Link DIR-X3260 Wi-Fi router's firmware, which is associated with insufficient input data cleansing. This can be...

(0Day) D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

(0Day) D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi executable. The issue results from an incorrect...

(0Day) D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...