CVE-2022-37125

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

CVE-2022-37125

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

CVE-2022-37125

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

Command injection

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

EUVD-2022-39778

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

CVE-2022-37125

CVE-2022-37125 affects D-Link DIR-816 A2, specifically the /goform/NTPSyncWithHost endpoint. The connected documents consistently indicate a command injection vulnerability in the DIR-816 A2_v1.10CNB04.img, enabling arbitrary command execution via that API. The CVE entry lists a high/critical imp...

CVE-2022-36620

D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...

CVE-2022-36620

D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

Authentication flaw

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

D-Link DIR-816 安全漏洞

The D-Link DIR-816 and D-Link DIR-816 A2 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which originates from the ability to initialize a network without authenticating via /goform/wizardend...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from susceptibility to a command injection attack via /goform/SystemCommand, where the user passes in command parameters...

PT-2022-23823 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue is related to command injection via the "/goform/form2userconfig.cgi" API endpoint. This allows for potential exploitation. Recommendations: For version 1.10CNB04, consider disabling...

CVE-2022-37130

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

D-Link DIR-816 命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which stems from being susceptible to command injection via /goform/NTPSyncWithHost...

PT-2022-23825 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2 v1.10CNB04.img Description: The network can be initialized without authentication via the "/goform/wizard end" API endpoint. Recommendations: For D-Link DIR-816 version A2 v1.10CNB04.img, as a temporary workaround,...

PT-2022-23824 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 A2 version 1.10CNB04 Description: The issue is related to command injection via the /goform/NTPSyncWithHost API endpoint. This allows for potential malicious commands to be executed. There is no information provided about the...