PT-2023-5376 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: The issue is related to a stack overflow in the form2IPQoSTcDel function via the removeRuleList parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...

PT-2023-5416 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 versions DIR806A1 FW100CNb11 Description: The issue is related to the lack of data cleaning measures at the management level, which can be exploited by a remote attacker to execute arbitrary commands using the REMOTE PORT...

CVE-2023-43242

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel...

PT-2023-5417 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 version DIR806A1 FW100CNb11 Description: The issue is related to command injection in the D-LINK DIR-806 1200M11AC wireless router. It is associated with a lack of data cleaning measures at the management level, which can be...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which stems from a parameter macCloneMac found to contain a stack overflow via setMAC...

CVE-2023-43238

The CVE-2023-43238 vulnerability affects D-Link DIR-816 A2 firmware (version 1.10CNB05). A stack overflow is triggered in the form2Dhcpip.cgi component via the nvmacaddr parameter, exposing potential impact to confidentiality, integrity, and availability. The available sources describe a memory o...

CVE-2023-43242

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel...

CVE-2023-43236

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dirsetWanWifi...

CVE-2023-43238

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi...

CVE-2023-43241: Out-of-bounds Write

D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadioSecurity...

CVE-2023-43236: Out-of-bounds Write

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dirsetWanWifi...

CVE-2023-43239: Out-of-bounds Write

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag5G in showMACfilterMAC...

CVE-2023-43235: Out-of-bounds Write

D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings...

CVE-2023-43237: Out-of-bounds Write

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC...

CVE-2023-43238: Out-of-bounds Write

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi...

CVE-2023-43240: Out-of-bounds Write

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sipaddress in ipportFilter...

CVE-2023-43128: Improper Neutralization of Special Elements used in a Command

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection due to lax filtering of HTTPST parameters...

CVE-2023-43240

CVE-2023-43240 affects D-Link DIR-816 A2 firmware v1.10CNB05, where a stack overflow can be triggered via the sip_address parameter in ipportFilter. The vulnerability is network-exploitable with no authentication or user interaction required, and the CVSS metrics indicate HIGH impact on confident...

D-LINK DIR-806 Command Injection Vulnerability

The D-Link DIR-806 is a wireless router from China-based AUO D-Link. A security vulnerability exists in DIR806A1FW100CNb11 in the D-LINK DIR-806 1200M11AC, which stems from a poor filtering of the HTTPST parameter, making it susceptible to command injection attacks...

CVE-2023-43128

The CVE-2023-43128 entry targets D-LINK DIR-806 1200M11AC, specifically the DIR806A1_FW100CNb11 firmware. The root cause is lax filtering of the HTTP_ST parameter, enabling a remote attacker to perform command injection. The vulnerability is classified with CVSS v3.1 base metrics: CVSS:3.1/AV:N/A...