The vulnerability of D-Link DSR series router microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DSR series router microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-57376

CVE-2024-57376 affects D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, and DSR-1000N with firmware versions 3.13–3.17B901C. The root cause is a buffer overflow in the CGI logout handling path triggered via extCpResult passed to captivePortalLib.duaLogoutInfoGet, using strcpy on user input,...

D-Link多款产品 安全漏洞

The D-Link DSR-250N, among others, is a Unified Services Router from China-based AUO D-Link. A security vulnerability exists in various D-Link products. An attacker exploiting the vulnerability can remotely execute code. The following products are affected: DSR-150, DSR-150N, DSR-250, DSR-250N,...

PT-2025-3435 · D Link · Dsr-250 +4

Name of the Vulnerable Software and Affected Versions: D-Link DSR-150 versions 3.13 through 3.17B901C D-Link DSR-150N versions 3.13 through 3.17B901C D-Link DSR-250 versions 3.13 through 3.17B901C D-Link DSR-250N versions 3.13 through 3.17B901C D-Link DSR-500N versions 3.13 through 3.17B901C D-Li...

Ethyca Fides HTML Injection Vulnerability in HTML-Formatted DSR Packages

Impact The Fides web application allows data subject users to request access to their personal data. If the request is approved by the data controller user operating the Fides web application, the data subject's personal data can then retrieved from connected systems and data stores before being...

D-Link Routers Authentication Bypass (CVE-2020-26567)

An authentication bypass vulnerability exists in D-Link DSR-250N. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system allows a hacker to gain access to the device’s basic embedded Linux operating system.

The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to gain access to the device’s basic embedded Linux operating system...

D-Link DSR-500N Default Account Vulnerability

A security vulnerability exists in the D-Link DSR-500N, a wireless router from D-Link, Taiwan, China, which stems from the fact that version 1.02 of the D-Link DSR-500N contains hard-coded credentials for user accounts that are not documented in the "etc/passwd" file. The vulnerability is caused ...

CVE-2021-39615

D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be able to log in via SSH or Telnet and thus gain access to the underlying...

Hardcoded credentials

UNSUPPORTED WHEN ASSIGNED D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be able to log in via SSH or Telnet and thus gain acce...

CVE-2021-39615

The D-Link DSR-500N is affected by CVE-2021-39615 in version 1.02, where hard-coded credentials for undocumented accounts in /etc/passwd allow an attacker to log in via SSH or Telnet and gain access to the embedded Linux OS. The issue is fixed in firmware version 2.12/2. This vulnerability is not...

PT-2021-4449 · D Link · Dsr-500N

Name of the Vulnerable Software and Affected Versions: D-Link DSR-500N version 1.02 D-Link DSR-500N versions prior to 2.12/2 Description: The issue is related to hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. If an attacker recovers the cleartext password of the...

D-Link DSR-500N 信任管理问题漏洞

A security vulnerability exists in the D-Link DSR-500N, a wireless router from D-Link, Taiwan, China, which stems from the fact that version 1.02 of the D-Link DSR-500N contains hard-coded credentials for user accounts that are not documented in the "etc/passwd" file. The vulnerability is caused ...

D-Link DSR-250 Command Injection (CVE-2020-18568)

A command injection vulnerability exists in D-Link DSR-250. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-link DSR-250 UPnP service command injection vulnerability

The D-link DSR-250 is a Unified Services Router. An input validation vulnerability exists in the D-link DSR-250 UPnP service, which allows remote attackers to exploit the vulnerability to submit a special request that can be used in the service context to execute arbitrary commands...

CVE-2020-18568

The D-Link DSR-250 3.14 DSR-1000N 2.11B201 UPnP service contains a command injection vulnerability, which can cause remote command execution...

CVE-2020-18568

The D-Link DSR-250 3.14 DSR-1000N 2.11B201 UPnP service contains a command injection vulnerability, which can cause remote command execution...

Command injection

The D-Link DSR-250 3.14 DSR-1000N 2.11B201 UPnP service contains a command injection vulnerability, which can cause remote command execution...

CVE-2020-18568

The D-Link DSR-250 3.14 DSR-1000N 2.11B201 UPnP service contains a command injection vulnerability, which can cause remote command execution...

CVE-2020-18568

CVE-2020-18568 concerns a command injection vulnerability in the UPnP service of D-Link DSR-250 (3.14) and DSR-1000N (2.11B201). Multiple connected sources confirm an input-validation/command execution flaw in the UPnP component that could allow remote execution of arbitrary commands. Affected pr...