8 matches found
Command injection
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp...
Stack overflow
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
CVE-2023-25280
CVE-2023-25280 affects D-Link DIR820LA1_FW105B03 (and related DIR-820L/DIR-820 routers) with an OS command injection via the ping_addr parameter in ping.ccp. Root privileges can be gained by an unauthenticated attacker, per connected documents, with CVSS 3.1 base score 9.8 (CRITICAL, NETWORK vect...
CVE-2023-25281
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp...
CVE-2023-25280
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Command injection
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload...
CVE-2023-25279
The CVE-2023-25279 entry concerns an OS command injection in the D-Link DIR820LA1_FW105B03 firmware, enabling privilege escalation to root via a crafted payload. The affected product is a D-Link DIR820LA1 router; root cause is an OS command injection vulnerability, with impact described as high c...
CVE-2023-25279
OS Command injection vulnerability in D-Link DIR820LA1FW105B03 allows attackers to escalate privileges to root via a crafted payload...