CVE-2022-43621

CVE-2022-43621 affects D-Link DIR-1935 router firmware 1.03. The root cause is an incorrectly implemented comparison in the HNAP login handling, allowing network-adjacent attackers to bypass authentication. Impact is authentication bypass with high confidentiality/integrity/availability risk as p...

CVE-2022-43624

Affected product: D-Link DIR-1935, firmware version 1.03. The vulnerability (CVE-2022-43624) is a command injection flaw in the web management portal, triggered by parsing subelements inside StaticRouteIPv6List during SetStaticRouteIPv6Settings handling. The issue allows network-adjacent attacker...

CVE-2022-43646

CVE-2022-43646 affects D-Link DIR-825 (versions 1.0.9/EE). The vulnerability is in the Vimeo plugin for the xupnpd service (listening on TCP 4044) where unvalidated user-supplied strings are used to spawn a system call, allowing network-adjacent attackers to execute arbitrary code as the admin us...

CVE-2022-43633

This CVE affects D-Link DIR-1935 routers running v1.03. The underlying issue is a command injection in the web management portal: during parsing of the IPAddress field in SetSysLogSettings, input is insufficiently validated before being passed to a system call, allowing a network-adjacent attacke...

CVE-2022-43645

CVE-2022-43645 affects D-Link DIR-825 (version 1.0.9/EE). The root cause is a lack of validation of a user-supplied string in the IVI plugin for the xupnpd service, which listens on TCP port 4044, enabling execution of arbitrary code via a system call. The vulnerability allows network-adjacent at...

CVE-2022-43627

CVE-2022-43627 affects D-Link DIR-1935 with firmware 1.03. The flaw: during SetStaticRouteIPv4Settings handling, parsing of StaticRouteIPv4Data does not validate a user-supplied string before a system call, enabling remote code execution with root privileges for network-adjacent attackers; authen...

CVE-2022-43647

CVE-2022-43647 affects D-Link DIR-825 routers (versions 1.0.9/EE). The vulnerability in the xupnpd service listens on TCP port 4044 and stems from improper validation of a user-supplied string before it’s used to execute a system call. This allows network-adjacent attackers (no authentication req...

CVE-2022-43624

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43626

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43623

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43643

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd service, which listens on TC...

CVE-2022-43646

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vimeo plugin for the xupnpd service, which listens on TCP...

CVE-2022-43633

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2022-43631

CVE-2022-43631 affects D-Link DIR-1935 (firmware 1.03). The bug is in the web portal’s SetVirtualServerSettings handling, where parsing subelements of VirtualServerInfo does not properly validate a user-supplied string before it is used to execute a system call. This enables network-adjacent atta...

CVE-2022-43642

CVE-2022-43642 affects D-Link DIR-825 routers (version 1.0.9/EE) via the YouTube plugin for the xupnpd service, which listens on TCP port 4044. The root cause is improper validation of a user-supplied string used to construct a system call, enabling network-adjacent attackers to execute arbitrary...

CVE-2022-43632

CVE-2022-43632 affects D-Link DIR-1935 firmware 1.03. The flaw is in SetQoSSettings QoSInfo parsing: unvalidated user-supplied data is used in a system call, allowing network-adjacent attackers to achieve code execution as root. Exploitation details are documented by ZDI (ZDI-22-1504) and other f...

CVE-2022-43623

CVE-2022-43623 affects D-Link DIR-1935 1.03. The vulnerability is a command-injection flaw in the web management portal’s handling of the SetWebFilterSetting request, specifically when parsing the WebFilterURLs element. A user-supplied string is not properly validated before being used to execute...

CVE-2022-43622

CVE-2022-43622 affects D-Link DIR-1935 devices (version 1.03). The flaw is in handling of the Login requests to the web management portal: during parsing of the HNAP_AUTH header, the length of user-supplied data is not properly validated before copying into a fixed-size stack buffer, enabling a s...

CVE-2022-43648

CVE-2022-43648 affects D-Link DIR-3040 routers (version 1.20B03). The flaw is in the MiniDLNA service, where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling a heap-based buffer overflow. This allows network-adjacent attackers to execute a...

CVE-2022-43620

CVE-2022-43620 affects D-Link DIR-1935, version 1.03. The issue is an authentication bypass in the HNAP login handling, caused by improper authentication implementation. This enables network-adjacent attackers to bypass authentication on affected routers. Documented references include ZDI-22-1494...