D-Link DIR-878 Command Injection Vulnerability (CNVD-2022-38533)

The D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company. The D-Link DIR-878 is vulnerable to a command injection vulnerability that could be exploited by an unauthenticated LAN attacker to execute arbitrary system commands to control the system or interrupt services...

CVE-2021-43474

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

Improper access control

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

CVE-2021-43474

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

CVE-2021-43474

CVE-2021-43474 affects the D-Link DIR-823G REVA1 1.02B05 router. The issue is an access control vulnerability in the HNAP1 function, exploitable via any parameter. The CVSS data in the initial record shows high/critical impact (CVSS 2.0: base 7.5, Partial/Partial/Partial; CVSS 3.1: base 9.8, High...

CVE-2022-26670

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

Command injection

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

CVE-2022-26670

CVE-2022-26670 concerns the D-Link DIR-878 wireless router. The vulnerability stems from inadequate filtering for special characters in a webpage input field, enabling an unauthenticated LAN attacker to perform a command injection and execute arbitrary system commands. The available connected sou...

CVE-2022-26670 D-Link DIR-878 - Command Injection

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

CVE-2021-43474: Improper Neutralization of Special Elements used in a Command

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

CVE-2022-26670: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

PT-2022-11852

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G REVA1 version 1.02B05 Description An Access Control issue exists via any parameter in the HNAP1 function. Recommendations For D-Link DIR-823G REVA1 version 1.02B05, as a temporary workaround, consider restricting access to the...

D-Link DIR-878 操作系统命令注入漏洞

The D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company. The D-Link DIR-878 is vulnerable to a command injection vulnerability that could be exploited by an unauthenticated LAN attacker to execute arbitrary system commands to control the system or interrupt services...

D-Link DIR-823G 命令注入漏洞

D-Link DIR-823G is a wireless router from D-Link, a Taiwan-based company. D-Link DIR-823G is vulnerable to command injection, which can be exploited by attackers to achieve command injection...

The vulnerability of D-Link DIR-850 router’s microprogramming software, related to errors during the loading of configuration files, allows a hacker to redirect users to any arbitrary URL address.

The vulnerability of D-Link DIR-850 router’s microprogramming software is related to errors during the loading of configuration files. Exploiting this vulnerability can allow a malicious actor to redirect users to any desired URL address...

CVE-2020-28062

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

CVE-2020-28062: Unrestricted Upload of File with Dangerous Type

An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList$decompath. '/ Upload/Plugins /, which could let a remote malicious user execute arbitrary code...

PT-2022-8880

Name of the Vulnerable Software and Affected Versions HisiPHP version 2.0.11 Description An Access Control issue exists, allowing a remote malicious user to execute arbitrary code via specially constructed packets. The vulnerability is related to the $files = Dir::getList$decompath...

PT-2022-2516 · D Link · D-Link Dir-823-Pro

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823-Pro version 1.0.2 Description: The issue is related to the implementation of the SetNTPserverSeting function in the D-Link DIR-823-Pro wireless router's firmware, which fails to properly sanitize data at the management level...

PT-2022-4848 · D Link · D-Link Dir-2150

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2150 version 4.0.1 Description: The issue is related to a stack-based buffer overflow in the anweb service of the D-Link DIR-2150 router. This allows a remote attacker to execute arbitrary code on the affected device. The flaw exis...