CVE-2022-44801

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

D-Link DIR-823G 操作系统命令注入漏洞

D-Link DIR-823G is a wireless router from D-Link, a Chinese company. A security vulnerability exists in D-Link DIR-823G firmware version 1.02B03, which stems from its HNAP API function allowing an attacker to implement arbitrary operating system command execution via a carefully crafted HNAP1...

CVE-2022-44808

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function execute...

D-Link DIR-882 缓冲区错误漏洞

D-Link DIR-882 is a wireless router from D-Link, China. D-Link DIR-882 firmware versions 1.10B02 and 1.20B06 contain a buffer overflow vulnerability that stems from a lack of length validation of input data in its webGetVarString function, which could be exploited to cause a denial of service or...

CVE-2022-44807

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

CVE-2022-44804

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44804: Out-of-bounds Write

D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function...

CVE-2022-44806: Out-of-bounds Write

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow...

CVE-2022-44808: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function execute...

CVE-2022-44807: Out-of-bounds Write

D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString...

CVE-2022-44801: Undefined Security Weakness

D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control...

CVE-2022-44806

CVE-2022-44806 affects D-Link DIR-882 firmware versions 1.10B02 through 1.20B06. The vulnerability is a buffer overflow in the firmware (root cause: missing length validation in the wan_wan_phy_ifname path of function sub_46D180), enabling a remote attacker to potentially cause denial of service ...

CVE-2022-44807

The CVE-2022-44807 entry concerns D-Link DIR-882 firmware versions 1.10B02 through 1.20B06. A buffer overflow in the webGetVarString() function is described as the root cause, allowing potential impact to confidentiality, integrity, and availability. Connected sources confirm the vulnerable compo...

CVE-2022-44804

D-Link DIR-882 firmware versions 1.10B02 through 1.20B06 contain a buffer overflow in the websRedirect() function due to insufficient input length validation. Public sources describe the issue as enabling denial of service or remote code execution if exploited, with the vulnerable component being...

CVE-2022-44808

Summary: CVE-2022-44808 affects D-Link DIR-823G with firmware 1.02B03. The flaw is a command injection in the HNAP1 interface where an untrusted command is executed before the HNAP API function processes the request, enabling remote command execution via crafted requests. Affected software/compon...

CVE-2022-44801

Affected product: D-Link DIR-878 router (firmware 1.02B05). Issue: incorrect access control allowing authentication bypass (e.g., login with a blank password) that could compromise confidentiality, integrity, and availability. Root cause: access control error in DIR-878 firmware. Exploitation sta...

D-Link DIR-1935 Router Code Execution

The vulnerability of the SetSysLogSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize the input data in the string entered by the user when processing the IPAddress element. Exploiting this vulnerability allows...

D-Link DIR-1935 HNAP Bypass

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

D-Link DIR-1935 Router Code Execution

The vulnerability of the SetQoSSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure of the system to properly clean input data in the string entered by the user when processing the QoSInfo element. Exploiting this...

D-Link DIR-1935 Router Code Execution

The vulnerability of the SetStaticRouteIPv4Settings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure of the system to properly validate the input data entered by the user when processing the StaticRouteIPv4Data element. Exploiti...