CVE-2023-39666

CVE-2023-39666 affects the D-Link DIR-842 firmware fw_revA_1-02_eu_multi_20151008. The vulnerability consists of multiple buffer overflows in the fgets function exposed via the acStack_120 and acStack_220 parameters. CVSS 3.1/3.1 base score 9.8 (CRITICAL) with network attack vector, no user inter...

D-Link DIR-842 安全漏洞

The D-Link DIR-842 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-842V2 version 1.0.3, which stems from the presence of a command execution vulnerability...

PT-2023-3100 · D Link · D-Link Dir-842

Name of the Vulnerable Software and Affected Versions: D-Link DIR-842V2 version 1.0.3 Description: The issue allows attackers to execute arbitrary commands via importing a crafted file. This is related to the lack of data cleaning measures at the management level, which can be exploited by a remo...

PT-2023-3096 · D Link · D-Link Dir-842

Name of the Vulnerable Software and Affected Versions: D-Link DIR-842V2 version 1.0.3 Description: The issue is related to a command injection vulnerability in the iperf3 diagnostics function. This vulnerability is associated with a lack of data sanitization at the management level, which could...

D-Link DIR-842 telnetd authentication anti-blast protection mechanism bypass vulnerability

D-Link DIR-842 is a home router manufactured by Taiwan Youxun Technology Co. The D-Link DIR-842 has a telnetd authentication anti-blast protection mechanism bypass vulnerability, which can be exploited by attackers to bypass the anti-violence cooling delay period via a time-based side channel...

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

Authentication flaw

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

CVE-2020-15632

CVE-2020-15632 affects D-Link DIR-842 routers (3.13B05). The flaw lies in the HNAP GetCAPTCHAsetting request processing, caused by improper session handling, allowing network-adjacent attackers to bypass authentication and execute arbitrary code in the device context. Exploitation details and adv...

CVE-2020-15632

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 3.13B05 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue...

D-Link DIR-842 Authentication Vulnerability

The D-Link DIR-842 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the HNAP GetCAPTCHAsetting request processing in the D-Link DIR-842. The vulnerability originates from a network system or product that does not properly authenticate a user's identity. An...

D-Link DIR-842 HNAP GetCAPTCHAsetting Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-842 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of HNAP GetCAPTCHAsetting requests. The issue results fro...

Buffer Overflow Vulnerability in D-Link DIR-842

The D-Link DIR-842 is a 2.4GHz & 5GHz dual band router. The D-Link DIR-842 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a program crash...

D-Link DIR-842 REVC Buffer Overflow Vulnerability

The D-Link DIR-842 REVC is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-842 REVC using firmware version v3.13B09 HOTFIX. The vulnerability originates when a network system or product performs an operation on memory without properly...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

Stack overflow

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

CVE-2020-8962

CVE-2020-8962 describes a stack-based buffer overflow in the D-Link DIR-842 REVC, caused by the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint (firmware v3.13B09 HOTFIX). The provided documents do not explicitly detail the impact beyond the overflow descriptio...

CVE-2020-8962

A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...

CVE-2019-18852

Certain D-Link devices have a hardcoded Alphanetworks user account with TELNET access because of /etc/config/imagesign or /etc/alphaconfig/imagesign. This affects DIR-600 B1 V2.01 for WW, DIR-890L A1 v1.03, DIR-615 J1 v100 for DCN, DIR-645 A1 v1.03, DIR-815 A1 v1.01, DIR-823 A1 v1.01, and DIR-842...