CVE-2023-43236

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dirsetWanWifi...

PT-2022-23826 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: The issue is related to Command Injection via the "/goform/SystemCommand" API endpoint. When a user passes in the command parameter, it is spliced into byte 4836B0 by snprintf, and then...