Lucene search
K

5 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:0 a.m.31 views

D-Link DIR-825/EE xupnpd Generic Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd service, which listens on TCP port...

8.8CVSS4.3AI score0.00607EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:0 a.m.29 views

D-Link DIR-825/EE xupnpd Upload Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044. The issue result...

8.8CVSS4.5AI score0.00607EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:0 a.m.24 views

D-Link DIR-825/EE xupnpd IVI Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IVI plugin for the xupnpd service, which listens on TCP port 404...

8.8CVSS4.7AI score0.00607EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:0 a.m.25 views

D-Link DIR-825/EE xupnpd Dreambox Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on TCP por...

8.8CVSS4.3AI score0.02629EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:0 a.m.27 views

D-Link DIR-825/EE xupnpd Vimeo Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vimeo plugin for the xupnpd service, which listens on TCP port...

8.8CVSS4.6AI score0.02629EPSS
Exploits0References1
Rows per page
Query Builder