Lucene search
+L

80 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:41 p.m.10 views

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

10CVSS8.7AI score0.28179EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2025/02/26 12:00 a.m.91 views

D-Link DIR-823 Multiple Vulnerabilities (2025)

D-Link DIR-823 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS6.8AI score0.0815EPSS
SaveExploits15References11
CNVD
CNVD
added 2024/07/10 12:00 a.m.10 views

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23485)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...

8.8CVSS8.3AI score0.01435EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/02/26 12:00 a.m.10 views

PT-2024-1967 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a function sub 4110f4 in the D-Link DIR-823G router's firmware, which contains errors in handling URL addresses with certain extensions, such as html, .asp, .php, or...

9CVSS7.3AI score0.00427EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.11 views

The vulnerability of the SetNTPserverSeting() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetNTPserverSeting function in D-Link DIR-823-Pro wireless routers’ software lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the systemtimetimezone paramet...

10CVSS8.2AI score0.28179EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2022/05/07 12:00 a.m.29 views

D-Link DIR-823-Pro Command Injection Vulnerability (CNVD-2022-38531)

The D-Link DIR-823-Pro is a router. version 1.0.2 of the D-Link DIR-823-Pro is vulnerable to command injection, which stems from the failure to properly filter the construct command special characters, commands, etc. in the function SetNTPserverSeting, which can be exploited by attackers to execu...

5.8AI score
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/02 2:15 p.m.7 views

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

10CVSS7.5AI score0.28179EPSS
SaveExploits1References3
OSV
OSV
added 2022/05/02 2:15 p.m.10 views

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

9.8CVSS7.5AI score0.28179EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/02 2:15 p.m.40 views

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

10CVSS0.28179EPSS
SaveExploits1References2
Prion
Prion
added 2022/05/02 2:15 p.m.27 views

Command injection

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

10CVSS9.9AI score0.28179EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/02 1:06 p.m.37 views

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

10AI score0.28179EPSS
SaveExploits1References2
CVE
CVE
added 2022/05/02 1:06 p.m.82 views

CVE-2022-28573

CVE-2022-28573 concerns D-Link DIR-823-Pro firmware v1.0.2 where the vulnerable function is SetNTPserverSeting(). The issue allows an attacker to trigger a command injection via the system_time_timezone parameter, enabling arbitrary command execution. Multiple connected sources (NVD, Red Hat, CVE...

10CVSS9.9AI score0.28179EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/05/02 12:00 a.m.9 views

D-Link DIR-823-Pro 操作系统命令注入漏洞

The D-Link DIR-823-Pro is a router from China-based AUO D-Link. The D-Link DIR-823-Pro version 1.0.2 suffers from an operating system command injection vulnerability that originates from the inclusion of a command injection vulnerability in the function SetNTPserverSeting. An attacker could explo...

10CVSS8.8AI score0.28179EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/04/01 12:00 a.m.13 views

PT-2022-2516 · D Link · D-Link Dir-823-Pro

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823-Pro version 1.0.2 Description: The issue is related to the implementation of the SetNTPserverSeting function in the D-Link DIR-823-Pro wireless router's firmware, which fails to properly sanitize data at the management level...

10CVSS9.8AI score0.28179EPSS
SaveExploits1References5
CNVD
CNVD
added 2022/02/21 12:00 a.m.51 views

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15176)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

9.8CVSS6.8AI score0.03715EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/02/21 12:00 a.m.72 views

D-Link Dir-823-Pro Command Injection Vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro 1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

9.8CVSS6.6AI score0.03746EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/02/21 12:00 a.m.54 views

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15175)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

9.8CVSS6.7AI score0.03715EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.9 views

The vulnerability of the implementation of the SetStaticRouteSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetStaticRouteSettings function in D-Link DIR-823-Pro wireless router microprogramming software is related to insufficient cleaning of input data during the processing of the staticroutelist parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

10CVSS8.1AI score0.03746EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.25 views

The vulnerability of the implementation of the SetWLanApcliSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetWLanApcliSettings function in the microprogramming software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the ApCliKeyStr parameter. Exploiting this vulnerability allows a remote...

10CVSS8.1AI score0.04403EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.14 views

The vulnerability of the implementation of the SetStationSettings() function in D-Link DIR-823-Pro wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetStationSettings function in the microprogrammed software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the stationaccessenable parameter. Exploiting this vulnerability allows a...

10CVSS8.1AI score0.03715EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder