CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from susceptibility to a command injection attack via /goform/SystemCommand, where the user passes in command parameters...

D-Link DIR-816 安全漏洞

The D-Link DIR-816 and D-Link DIR-816 A2 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which originates from the ability to initialize a network without authenticating via /goform/wizardend...

D-Link DIR-816 命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which stems from being susceptible to command injection via /goform/NTPSyncWithHost...

PT-2022-23824 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 A2 version 1.10CNB04 Description: The issue is related to command injection via the /goform/NTPSyncWithHost API endpoint. This allows for potential malicious commands to be executed. There is no information provided about the...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/form2userconfig.cgi...

D-Link DIR-816 访问控制错误漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 firmware A2v1.10CNB04.img image, which stems from its /goform/setMAC component that allows an attacker to reset the network without authentication...

PT-2022-23511 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue allows the network to be reset without authentication via the "/goform/setMAC" API endpoint. This affects the ability to secure the network, as unauthorized access can lead to network...

CVE-2022-37130

CVE-2022-37130 affects D-Link DIR-816 A2 v1.10CNB04 and DIR-878 DIR_878_FW1.30B08.img. A command injection exists in /goform/Diagnosis: when a condition is met, setnum is spliced into v10 via snprintf and the system is executed, enabling remote command execution. Exploitation details, affected ve...

PT-2022-23826 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: The issue is related to Command Injection via the "/goform/SystemCommand" API endpoint. When a user passes in the command parameter, it is spliced into byte 4836B0 by snprintf, and then...

PT-2022-23823 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue is related to command injection via the "/goform/form2userconfig.cgi" API endpoint. This allows for potential exploitation. Recommendations: For version 1.10CNB04, consider disabling...

PT-2022-23828 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 versions A2 v1.10CNB04 D-Link DIR-878 version DIR 878 FW1.30B08 Description: A command injection issue occurs in the /goform/Diagnosis endpoint, where the setnum variable is spliced into v10 by snprintf, allowing system executi...

CVE-2022-36620

The CVE-2022-36620 vulnerability affects D-Link DIR-816 A2 (v1.10CNB04) and DIR-878 (FW1.30B08.img). A buffer overflow can be triggered via the /goform/addRouting endpoint, as described in multiple feeds. The CVE entry notes a high severity (CVSS v3.1: 7.5, NETWORK access, no authentication, avai...

CVE-2022-37130

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability...

PT-2022-23513 · D Link · D-Link Dir-816 +1

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04 D-link DIR-878 version DIR 878 FW1.30B08.img Description: The issue is related to a Buffer Overflow that can be triggered via the "/goform/addRouting" API endpoint. This allows for potential exploitation...

PT-2022-23825 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2 v1.10CNB04.img Description: The network can be initialized without authentication via the "/goform/wizard end" API endpoint. Recommendations: For D-Link DIR-816 version A2 v1.10CNB04.img, as a temporary workaround,...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/Diagnosis, where setnum is spliced and then executed after the...

D-Link DIR-816 Buffer Overflow Vulnerability

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the mirrored version of the D-link DIR-816 firmware A2v1.10CNB04.img. The vulnerability stems from the fact that when the wantype of its /goform/form2Wan.cgi component is 3, the...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

CVE-2022-37133

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...