CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

CVE-2024-33343 affects D-Link DIR-822+ V1.0.5; the ChgSambaUserSettings() function in prog.cgi allows command injection via shell due to lack of proper sanitization of the samba name parameter. This enables remote command execution on the device. Red Hat/NVD entries corroborate the vulnerability ...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

CVE-2024-33342 affects D-Link DIR-822+ (V1.0.5). A command injection exists in the SetPlcNetworkpwd function of prog.cgi, enabling remote attackers to execute arbitrary shell commands. Impact is remote code execution with network access, no user interaction required. Public sources (NVD/Red Hat/C...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

The CVE-2024-33344 entry concerns the D-Link DIR-822+ firmware (V1.0.5). The authenticated/rootless issue is a command injection in the ftext() function of upload_firmware.cgi, enabling remote attackers to execute arbitrary shell commands. Exploitation would be over the network with no user inter...

D-Link DIR-822 安全漏洞

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the ChgSambaUserSettings function of prog.cgi, allowing remote attackers to execute arbitrary commands...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

D-Link DIR-822 安全漏洞

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the SetPlcNetworkpwd function of prog.cgi, allowing remote attackers to execute arbitrary commands via...

PT-2024-3192 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to a command injection vulnerability in the ftext function of the upload firmware.cgi script in the D-Link DIR-822+ firmware. This vulnerability is due to the lack of proper...

Exploit for CVE-2023-51119

CVE-2023-51119 Improper Access Control on D-Link DIR-605L rout...

The vulnerability of the scandir.sgi file in the D-Link DIR-868L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the scandir.sgi file of the D-Link DIR-868L router software is caused by buffer overflow on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2024-3332 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router versions v1.01KRb03 and before Description: The issue is related to a Permission Bypass vulnerability via the getcfg.php component. It is associated with inadequate access control when handling the AUTHORIZED GROUP...