CVE-2021-3707

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device...

CVE-2021-3708

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device...

Command injection

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device...

CVE-2021-3707

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3708, to execute any OS commands on the vulnerable device...

CVE-2021-3708

CVE-2021-3708 affects the D-Link DSL-2750U router (firmware ME1.16 and earlier). The vulnerability is an OS command injection that an unauthenticated, local-network attacker can trigger to execute arbitrary commands. Remediation: upgrade to firmware vME_1.22 (as indicated by JVN/CNVD references)....

CVE-2021-3708

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device...

CVE-2021-3707

CVE-2021-3707 (and CVE-2021-3708) affects D-Link DSL-2750U routers with firmware vME1.16 or earlier. The issues allow an unauthenticated attacker on the local network to perform dangerous actions: CVE-2021-3707 enables unauthorized configuration modification, while CVE-2021-3708 enables OS comman...

D-Link DSL-2750U安全漏洞

The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router.An unauthorized configuration modification vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could use this vulnerability to modify the configuration without authorization...

PT-2021-21488 · D Link · Dsl-2750U

Name of the Vulnerable Software and Affected Versions: D-Link router DSL-2750U versions vME1.16 and prior Description: The issue allows an unauthenticated attacker on the local network to modify the configuration and execute any OS commands on the vulnerable device. Recommendations: For D-Link...

D-Link DSL-2750U 操作系统命令注入漏洞

The D-Link DSL-2750U is a wireless N 300 ADSL2 modem router. an OS command injection vulnerability exists in the D-Link DSL-2750U ME1.16 and earlier versions. An attacker could exploit this vulnerability in combination with other vulnerabilities to execute arbitrary OS commands...

Youxiang Technology DSL-2740R code problem vulnerability

The UDomain DSL-2740R is a high-performance ADSL router from D-Link, Taiwan, China. A security vulnerability exists in the D-Link DSL-2740R UK 1.01, which can be exploited by attackers to cause a denial of service on the device...

CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are...

CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are...

Null pointer dereference

UNSUPPORTED WHEN ASSIGNED Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and al...

CVE-2021-29294

Affects D-Link DSL-2740R UK 1.01. The vulnerability is a Null Pointer Dereference in the device’s HNAP interface: an attacker can trigger a denial of service by sending a crafted POST to /HNAP1/. Multiple sources (NVD/CNVD/CVE records) describe the same issue and confirm the device is End of Life...

CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are...

D-Link DSL-2740R 代码问题漏洞

The UDomain DSL-2740R is a high-performance ADSL router from D-Link, Taiwan, China. A security vulnerability exists in the D-Link DSL-2740R UK 1.01, which can be exploited by attackers to cause a denial of service on the device...

Arcadyan Directory Traversal Vulnerability (Apr 2021) - Active Check

Arcadyan devices are prone to a directory traversal vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

com.antheminc.oss:nimbus-core (>=1.1.7 <=1.2.0.M5), com.antheminc.oss:nimbus-entity-dsl (>=1.1.7 <=1.2.0.M5) +110 more potentially affected by CVE-2021-35043 via org.owasp.antisamy:antisamy (>=1.5.7 <=1.6.3)

org.owasp.antisamy:antisamy MAVEN version =1.5.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.2.1, =1.2.1, =1.2.1, =1.0.5, =1.0.5, =1.0.5, =1.0.5, =1.5.14, =1.5.14, =1.5.14, =1.5.26 and more Source cves: CVE-2021-35043 Source advisory: OSV:GHSA-9C8W-JRW3-Q2C3...

D-LINK DSL-2888A Arbitrary Password Change Vulnerability

The D-LINK DSL-2888A is a unified services router from D-link China.A security vulnerability exists in the D-LINK DSL-2888A, which could be exploited by attackers to make unauthorized changes to the administrator user's password...