8 matches found
Command injection
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp...
Stack overflow
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
CVE-2023-25280
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2023-25281
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
CVE-2023-25280
CVE-2023-25280 affects D-Link DIR820LA1_FW105B03 (and related DIR-820L/DIR-820 routers) with an OS command injection via the ping_addr parameter in ping.ccp. Root privileges can be gained by an unauthenticated attacker, per connected documents, with CVSS 3.1 base score 9.8 (CRITICAL, NETWORK vect...
Command injection
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload...
CVE-2023-25279
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload...
CVE-2023-25279
The CVE-2023-25279 entry concerns an OS command injection in the D-Link DIR820LA1_FW105B03 firmware, enabling privilege escalation to root via a crafted payload. The affected product is a D-Link DIR820LA1 router; root cause is an OS command injection vulnerability, with impact described as high c...