CVE-2022-46076

D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...

CVE-2022-46076: Incorrect Authorization

D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...

PT-2022-27888 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the speed dir parameter at the "/goform/SetSpeedWan" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider...

Tenda F1203 安全漏洞

The Tenda F1203 is a wireless router from China-based Tenda. A security vulnerability exists in the Tenda F1203 firmware version V2.0.1.6, which stems from the speeddir parameter of its /goform/SetSpeedWan component that allows an attacker to implement a buffer overflow...

PT-2022-27733 · D Link · D-Link Dir-869

Name of the Vulnerable Software and Affected Versions: D-Link DIR-869 version DIR869Ax FW102B15 Description: The issue is related to Authentication Bypass via phpcgi. Recommendations: For D-Link DIR-869 version DIR869Ax FW102B15, as a temporary workaround, consider restricting access to the phpcg...

D-Link DIR-869 安全漏洞

The D-Link DIR-869 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-869 DIR869AxFW102B15 version, which stems from an easy authentication bypass via phpcgi...

CVE-2022-46076

CVE-2022-46076 affects D-Link DIR-869 (DIR869Ax_FW102B15) with an Authentication Bypass via phpcgi. CVSSv3.1 base score 7.5 (HIGH). Root cause: authentication bypass in phpcgi interface. Exploitation status in connected data indicates a PoC exists; NVD entry does not confirm active exploits. Docu...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

Command injection

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

CVE-2022-44832

CVE-2022-44832 applies to the D-Link DIR-3040 router, specifically firmware 120B03, where the SetTriggerLEDBlink function fails to filter crafted input and enables command injection. Public sources across NVD/Red Hat/CNVD/CNVD variants consistently describe an arbitrary command execution vulnerab...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

PT-2022-27320 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 120B03 Description: A command injection issue was discovered in the D-Link DIR-3040 device. The vulnerability is related to the SetTriggerLEDBlink function, which allows for command injection. Recommendations: For D-Li...

CVE-2022-44832: Improper Neutralization of Special Elements used in a Command

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

CVE-2022-44832

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function...

D-Link DIR-3040 命令注入漏洞

D-Link DIR-3040 is a router from China Youxun D-Link. It provides the function of connecting to the network. D-Link DIR-3040 has a command injection vulnerability, which stems from the SetTriggerLEDBlink function fails to properly filter the construct command special characters, commands, etc. An...

D-Link DIR-823G Router Command Injection

The vulnerability of the D-Link DIR-823G router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands usin...

DEBIAN-CVE-2022-41720

On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS"C:/tmp".Open"COM1" opens the...

D-Link DIR-878 Authentication Bypass

The vulnerability of D-Link DIR-878 wireless routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions from a remote location...

D-Link DIR-823G Router Arbitrary Command Execution

The vulnerability of the microprogrammed software of D-Link DIR-823G routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...