CVE-2023-39638

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbcsystem function at /htdocs/cgibin...

D-Link DIR-859 Command Injection Vulnerability

The D-Link DIR-859 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 versions, which originates from the lxmldbcsystem function in /htdocs/cgibin that contains a command injection vulnerability...

CVE-2023-39638

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbcsystem function at /htdocs/cgibin...

CVE-2023-39638

CVE-2023-39638 affects D-LINK DIR-859 A1 1.05 through A1 1.06B01 Beta01. A command injection exists in the lxmldbc_system function at the /htdocs/cgibin endpoint, linked to a failure to neutralize special elements, enabling remote arbitrary command execution. There is no public exploitation detai...

PT-2023-5237 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-859 versions A1 1.05 through A1 1.06B01 Beta01 Description: The issue is related to a command injection vulnerability via the lxmldbc system function at the "/htdocs/cgibin" endpoint. This vulnerability is associated with the failu...

D-Link DIR-859 Authentication Bypass Vulnerability

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

The vulnerability of the phpcgi_main function in the D-Link DIR-859 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-859 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

CVE-2023-36092

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36092

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36092

CVE-2023-36092 affects D-Link DIR-859 router firmware FW105b03 and is disclosed across multiple sources (NVD, CNVD, Red Hat, CNVD, OpenVAS). The vulnerability is described as an authentication bypass in the phpcgi_main component, enabling remote attackers to achieve escalated privileges. Reported...

PT-2023-4037 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 versions FW105b03 Description: The issue is related to an authentication bypass in the D-Link DIR-859 router's firmware, specifically affecting the phpcgi main function. This allows remote attackers to gain escalated privileges...

CVE-2023-36092

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

D-Link DIR-859 安全漏洞

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

D-Link DIR-859 Router Command Execution Vulnerability

D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local...

VulnCheck KEV: CVE-2019-17621

D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, /gena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local...

D-Link DIR-859 Command Injection Vulnerability

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

Command injection

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-859 操作系统命令注入漏洞

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...