CVE-2022-37123

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

CVE-2022-36619

In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC...

CVE-2022-36619

CVE-2022-36619 affects D-Link DIR-816 DIR-816 firmware A2_v1.10CNB04.img. The vulnerability, rooted in the /goform/setMAC endpoint, allows an unauthenticated reset of the device over the network. Reported impact aligns with high severity (CVSS 3.1: Network, no user interaction, availability impac...

CVE-2022-37129

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...

CVE-2022-37129

CVE-2022-37129 affects the D-Link DIR-816 A2 with firmware version 1.10CNB04. The vulnerability is a remote command injection via the HTTP endpoint /goform/SystemCommand . User-supplied parameter “command” is spliced into a local buffer (byte_4836B0) using snprintf and then executed through a cal...

CVE-2022-37125

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

CVE-2022-37125

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

CVE-2022-37125

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

Command injection

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

EUVD-2022-39778

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...

CVE-2022-37125

CVE-2022-37125 affects D-Link DIR-816 A2, specifically the /goform/NTPSyncWithHost endpoint. The connected documents consistently indicate a command injection vulnerability in the DIR-816 A2_v1.10CNB04.img, enabling arbitrary command execution via that API. The CVE entry lists a high/critical imp...

CVE-2022-36620

D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...

CVE-2022-36620

D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

Authentication flaw

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

CVE-2022-37128

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...

D-Link DIR-816 操作系统命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/form2userconfig.cgi...

PT-2022-23511 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue allows the network to be reset without authentication via the "/goform/setMAC" API endpoint. This affects the ability to secure the network, as unauthorized access can lead to network...