Lucene search
+L

13 matches found

CNVD
CNVD
•added 2021/11/25 12:00 a.m.•56 views

D-Link DWR-932C E1 Command Injection Vulnerability

The D-Link Dwr-932C E1 is a WiFi mobile modem router from China-based D-Link.A security vulnerability exists in the D-Link DWR-932C E1 firmware, which stems from an OS command injection in debugfcgi. An attacker could exploit this vulnerability to perform command injection via a crafted HTTP...

10CVSS1.9AI score0.07125EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/11/25 12:00 a.m.•46 views

D-Link DWR-932C E1 has unspecified vulnerabilities

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

10CVSS4.9AI score0.03917EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/23 10:15 p.m.•27 views

CVE-2021-42784

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS0.07125EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/23 10:15 p.m.•21 views

Authentication flaw

Missing Authentication for Critical Function vulnerability in debugpostset.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions...

10CVSS9.6AI score0.03917EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/11/23 10:15 p.m.•31 views

Command injection

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS9.7AI score0.07125EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/11/23 9:37 p.m.•67 views

CVE-2021-42783

The CVE-2021-42783 issue affects the D-Link DWR-932C E1 firmware, where a Missing Authentication for Critical Function in debug_post_set.cgi enables an unauthenticated attacker to perform administrative actions. The vulnerability is documented with a high-severity CVSS score (3.1: 9.8; 2.0: 10.0)...

10CVSS9.8AI score0.03917EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/23 9:37 p.m.•33 views

CVE-2021-42784 OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

9.9AI score0.07125EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/23 9:37 p.m.•69 views

CVE-2021-42784

CVE-2021-42784 describes an OS command injection in the debug_fcgi component of the D-Link DWR-932C E1 firmware. A remote attacker could exploit a crafted HTTP request to execute commands on the device, with high impact across confidentiality, integrity, and availability per CVSS 3.1/3.0 scores i...

10CVSS9.8AI score0.07125EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•5 views

CVE-2021-42784: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS6AI score0.07125EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•6 views

CVE-2021-42783: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in debugpostset.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions...

10CVSS6.1AI score0.03917EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•20 views

D-Link Dwr-932C E1 访问控制错误漏洞

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

10CVSS5.7AI score0.03917EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•5 views

PT-2021-4870

Name of the Vulnerable Software and Affected Versions D-Link DWR-932C E1 firmware affected versions not specified Description The issue is related to an OS Command Injection vulnerability in the debug fcgi component of the D-Link DWR-932C E1 firmware. This vulnerability allows a remote attacker t...

10CVSS0.07125EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/08/11 12:00 a.m.•6 views

PT-2021-4990

Name of the Vulnerable Software and Affected Versions D-Link DWR-932C E1 firmware affected versions not specified Description The issue is related to a Missing Authentication for Critical Function vulnerability in the debug post set.cgi component of the D-Link DWR-932C E1 firmware. This...

10CVSS0.03917EPSS
SaveExploits0References7
Rows per page
Query Builder