CVE-2018-14080

An issue in D-Link DIR-809 (A1 ≤1.09, A2 ≤1.11, Guest Zone ≤1.09) allows bypassing authentication to download the device configuration file. Cause: deficiencies in the authentication procedure. Impact: unauthorized access to configuration data. Remediation: update to versions later than 1.09 (A1)...

CVE-2018-14081

CVE-2018-14081 affects D-Link DIR-809 devices (A1 up to 1.09, A2 up to 1.11, and Guest Zone up to 1.09). The root cause is storage of sensitive credentials (admin password and WPA key) in cleartext, enabling disclosure of protected information. Exploitation details are not provided in the availab...

CVE-2018-14080

An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechanisms to download the configuration file...

PT-2018-3893 · D Link · D-Link Dir-809 A1 +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-809 A1 versions 1.09 and earlier D-Link DIR-809 A2 versions 1.11 and earlier D-Link DIR-809 Guest Zone versions 1.09 and earlier Description: The issue concerns the storage of device passwords, including the admin password and the...

PT-2018-3885 · D Link · D-Link Dir-809 A1 +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-809 A1 versions 1.09 and earlier D-Link DIR-809 A2 versions 1.11 and earlier D-Link DIR-809 Guest Zone versions 1.09 and earlier Description: An issue allows bypassing authentication mechanisms to download the configuration file. T...

Linux/MIPS (Big Endian) - execve(/bin/sh) + Reverse TCP 192.168.2.157/31337 Shellcode (181 bytes)

/ Linux/MIPS Big Endian - execve/bin/sh + Reverse TCP 192.168.2.157/31337 Shellcode 181 bytes Author: cq674350529 - execve'/bin/sh', tcp - 192.168.2.157/31337 - used in HTTP Request - tested on D-Link dir-850l router, avoid bad chars '\x00', '\x20', '\x23', '\x0d\x0a' - based on rigan's shellcode...

Linux/MIPS (Big Endian) - execve(/bin/sh) + Reverse TCP 192.168.2.157/31337 Shellcode (181 bytes)

Linux/MIPS Big Endian - execve/bin/sh + Reverse TCP 192.168.2.157/31337 Shellcode 181 bytes. Shellcode exploit for LinuxMIPS platform / Linux/MIPS Big Endian - execve/bin/sh + Reverse TCP 192.168.2.157/31337 Shellcode 181 bytes Author: cq674350529 Date: 2018-10-07 - execve'/bin/sh', tcp -...

CVE-2018-17881

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change...

CVE-2018-17880

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot...

Authentication flaw

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change...

CVE-2018-17880

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot...

CVE-2018-17881

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change...

CVE-2018-17881

The CVE-2018-17881 issue affects D-Link DIR-823G devices (GoAhead configuration) where the /HNAP1 SetPasswdSettings command can change the admin password without authentication. Root cause: unauthenticated access to GoAhead configuration leads to password changes. Affected product/version: D-Link...

CVE-2018-17880

CVE-2018-17880 affects D-Link DIR-823G (GoAhead web config). The GoAhead configuration allows the /HNAP1 endpoint to execute RunReboot commands without authentication, triggering device reboot. The NVD entry documents high impact on availability (CVSS v3: 7.5, NETWORK, LOW attack complexity, NO u...

PT-2018-14244 · Goahead +1 · Goahead +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 2018-09-19 Description: The issue allows unauthorized changes to the admin password through the GoAhead configuration, specifically by sending /HNAP1 SetPasswdSettings commands without proper authentication...

PT-2018-14243 · Goahead +1 · Goahead +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 2018-09-19 Description: The issue concerns the GoAhead configuration on the affected device, which allows the "/HNAP1" API endpoint to execute "RunReboot" commands without requiring authentication, thereby triggering a...

CVE-2018-17787

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function...

CVE-2018-17786

On D-Link DIR-823G devices, ExportSettings.sh, uploadsettings.cgi, GetDownLoadSyslog.sh, and uploadfirmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code...

Authentication flaw

On D-Link DIR-823G devices, ExportSettings.sh, uploadsettings.cgi, GetDownLoadSyslog.sh, and uploadfirmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code...

Command injection

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function...