PT-2022-5269

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10 B05 Description The issue is related to a stack overflow in the /goform/form2WizardStep54 component of the D-Link DIR-816 A2 router's firmware. This overflow is caused by the wizardstep54 pskpwd parameter...

CVE-2022-43000

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4pskpwd parameter at /goform/form2WizardStep4...

CVE-2022-42998

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

CVE-2022-42998

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

PT-2022-5272 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a stack overflow in the D-Link DIR-816 A2 router's firmware, which can be triggered via the srcip parameter at the "/goform/form2IPQoSTcAdd" API endpoint. This can...

CVE-2022-43002

The CVE-2022-43002 entry concerns a D-Link DIR-816 A2 device with firmware 1.10 B05 (noted in multiple sources). The vulnerability is a stack overflow in the wizardstep54_pskpwd parameter handled by /goform/form2WizardStep54, affecting the network-facing form. CVSS metrics indicate a CRITICAL imp...

CVE-2022-42999

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

PT-2022-5273 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue is related to a buffer overflow in the setRepeaterSecurity function of the D-Link DIR-816 A2 router's firmware. This can be exploited by a remote attacker using the pskValue parameter ...

CVE-2022-43000

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4pskpwd parameter at /goform/form2WizardStep4...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the wizardstep54pskpwd parameter of /goform/form2WizardStep54...

CVE-2022-43003: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function...

CVE-2022-42998: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd...

CVE-2022-42999: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm...

CVE-2022-43000: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4pskpwd parameter at /goform/form2WizardStep4...

CVE-2022-43002: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54pskpwd parameter at /goform/form2WizardStep54...

CVE-2022-42999

CVE-2022-42999 affects the D-Link DIR-816 A2 router (firmware 1.10 B05). The root cause is command injection in the web API endpoint at /goform/setSysAdm, exploitable through the admuser and admpass parameters. The issue can lead to arbitrary command execution with high impact, notably a High CVS...

CVE-2022-43001

CVE-2022-43001 affects D-Link DIR-816 A2, version 1.10 B05, with a stack overflow in the setSecurity function’s pskValue parameter. The vulnerability is documented with a high-impact CVSS v3.1 score (9.8, CRITICAL) across network attack vector, no user interaction, and impacts to confidentiality,...

CVE-2022-43001: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from a stack overflow in the pskValue parameter of the setSecurity function...

PT-2022-5677 · D Link · D-Link Dir-3060

Name of the Vulnerable Software and Affected Versions: D-Link DIR3060 version DIR3060A1 FW111B04.bin Description: The issue is related to a buffer overflow in the D-Link DIR-3060 router's firmware. Specifically, the FUN 0049ac18 function is vulnerable due to the lack of size checking for input...