CVE-2019-13561

The CVE affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where an attacker can remotely execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter. Affected component is the firmware check URL handling in DIR-655 C; root cause is u...

CVE-2019-13560

CVE-2019-13560 affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where the vulnerable component is the setup_wizard parameter processed by apply_sec.cgi. The root cause is the ability for remote attackers to force a blank password, enabling unauthorized access through the device’s...

D-Link DIR-818LW Command Injection Vulnerability (CNVD-2019-22226)

The D-Link DIR-818LW is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in HNAP1 in the D-Link DIR-818LW using firmware version 2.06betab01. The vulnerability stems from a network system or product not properly filtering specific elements of externally...

D-Link DIR-818LW Command Injection Vulnerability (CNVD-2019-22213)

The D-Link DIR-818LW is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in HNAP1 in the D-Link DIR-818LW using firmware version 2.06betab01. The vulnerability stems from a network system or product not properly filtering specific elements of externally...

CVE-2019-13481

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

CVE-2019-13481

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

CVE-2019-13482

CVE-2019-13482 affects D-Link DIR-818LW devices with firmware 2.06betab01. The issue is a command injection in HNAP1, exploitable via shell metacharacters in the Type field when calling SetWanSettings, and requires authentication. CVSS metrics indicate network exposure with high impact on confide...

CVE-2019-13481

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13481

CVE-2019-13481 affects D-Link DIR-818LW devices with firmware 2.06betab01. The issue is a command injection in HNAP1 exploitable via shell metacharacters in the MTU field to SetWanSettings, and is exploitable with authentication. Impact is reflected as high risk (remote, unauthenticated? Note: ex...

Unauthorized Access Vulnerability in D-Link Dir-816 Management System

The D-Link Dir-816 is a wireless router. An unauthorized access vulnerability exists in the D-Link Dir-816 management system, which can be exploited by an attacker to execute arbitrary code...

Command Execution Vulnerability in D-Link Dir-859 Management System

The D-Link Dir-859 is a wireless router. A command execution vulnerability exists in the D-Link Dir-859 management system that can be exploited by an attacker to execute arbitrary code...

The vulnerability of D-Link DIR-818LW router’s microprogramming software lies in the lack of measures to clean incoming data, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-818LW router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of D-Link DIR-823G router’s microprogram code, related to access control errors, allows a hacker to intercept the DNS service configuration.

The vulnerability of D-Link DIR-823G router’s microprogram code is related to access control errors. Exploiting this vulnerability allows a malicious actor to intercept DNS service configurations through the API interface using the SetWanSettings function...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-20996)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in HNAP1 in the D-Link DIR-823G using firmware version 1.02B03. The vulnerability stems from a network system or product not properly filtering specific elements of externally input...

CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...

CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...