Lucene search
+L

647 matches found

OSV
OSV
added 2021/03/30 2:15 p.m.11 views

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

9.8CVSS6AI score0.04905EPSS
SaveExploits1References2
NVD
NVD
added 2021/03/30 2:15 p.m.29 views

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

10CVSS0.04905EPSS
SaveExploits1References2
Prion
Prion
added 2021/03/30 2:15 p.m.26 views

Command injection

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

10CVSS9.8AI score0.04905EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/03/30 1:27 p.m.33 views

CVE-2021-26810

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dirsetWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser paramet...

10AI score0.04905EPSS
SaveExploits1References2
CVE
CVE
added 2021/03/30 1:27 p.m.56 views

CVE-2021-26810

D-Link DIR-816 A2 (firmware v1.10) is affected by a remote code injection vulnerability tracked as CVE-2021-26810. The issue arises from HTTP request parameters used in command string construction within the /goform/dir_setWanWifi handler, enabling command injection via shell metacharacters in th...

10CVSS9.8AI score0.04905EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2021/03/30 12:00 a.m.11 views

Binary Vulnerability in D-Link DIR-816 Router

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/03/30 12:00 a.m.9 views

Binary Vulnerability in D-Link DIR-816 Router (CNVD-2021-27694)

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/03/30 12:00 a.m.5 views

Binary Vulnerability in D-Link DIR-816 Router (CNVD-2021-27695)

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/03/30 12:00 a.m.9 views

Binary Vulnerability in D-Link DIR-816 Router (CNVD-2021-27693)

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2021/03/30 12:00 a.m.10 views

D-Link DIR-816 操作系统命令注入漏洞

The D-link DIR-816 A2 is a wireless AC750 dual-band router. A remote code injection vulnerability exists in the D-link DIR-816. The vulnerability stems from the availability of HTTP request parameters in the command string construction in the handler function of /goform/dirsetWanWifi. The...

10CVSS6.2AI score0.04905EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/03/14 12:00 a.m.7 views

Command Execution Vulnerability in DIR-816 750M11AC Wireless Router

DIR-816 750M11AC Wireless Router is a wireless router from AUO Electronic Devices Shanghai Co. A command execution vulnerability exists in the DIR-816 750M11AC Wireless Router, which can be exploited by an attacker to remotely execute commands...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/03 12:00 a.m.6 views

Command Execution Vulnerability in D-Link DIR-816 A1

D-Link DIR-816 A1 is a wireless router from AUO Electronic Equipment Shanghai Co. A command execution vulnerability exists in the D-Link DIR-816 A1, which can be exploited to execute arbitrary commands by sending a POST request with the 'datetime' parameter to form2systime.cgi...

7.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:00 a.m.19 views

The vulnerability of the Management Page component of D-Link DIR-816 A1 wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Management Page component in the microprogramming software of D-Link DIR-816 A1 relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.01582EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2019/10/11 8:15 p.m.10 views

CVE-2019-17507

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

7.5CVSS7.1AI score0.01582EPSS
SaveExploits1References1
NVD
NVD
added 2019/10/11 8:15 p.m.20 views

CVE-2019-17507

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

7.5CVSS7.3AI score0.01582EPSS
SaveExploits1References1
Prion
Prion
added 2019/10/11 8:15 p.m.19 views

Code injection

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

5CVSS7.3AI score0.01582EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2019/10/11 7:29 p.m.208 views

CVE-2019-17507

CVE-2019-17507 affects D-Link DIR-816 A1 devices (1.06). The issue is an authentication/bypass flaw allowing a client that ignores a redirect in dir_login.asp to access management pages (d_status.asp, version.asp, d_dhcptbl.asp, d_acl.asp). Root cause: bypasses the login/authorization mechanism v...

7.5CVSS7.3AI score0.01582EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/11 7:29 p.m.27 views

CVE-2019-17507

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

7.3AI score0.01582EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2019/08/01 12:00 a.m.26 views

D-Link DIR-816 A2 <= 1.11 Multiple Vulnerabilities

D-Link DIR-816 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:dlink:dir-816";...

7.4AI score
SaveExploits0References3
CNVD
CNVD
added 2019/07/08 12:00 a.m.3 views

Unauthorized Access Vulnerability in D-Link Dir-816 Management System

The D-Link Dir-816 is a wireless router. An unauthorized access vulnerability exists in the D-Link Dir-816 management system, which can be exploited by an attacker to execute arbitrary code...

7.5AI score
SaveExploits0
Rows per page
Query Builder