Lucene search
K

9 matches found

CNVD
CNVD
added 2021/11/25 12:0 a.m.21 views

D-Link DWR-932C E1 has unspecified vulnerabilities

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

10CVSS4.9AI score0.03792EPSS
Exploits0References1
CNVD
CNVD
added 2021/11/25 12:0 a.m.14 views

D-Link DWR-932C E1 Command Injection Vulnerability

The D-Link Dwr-932C E1 is a WiFi mobile modem router from China-based D-Link.A security vulnerability exists in the D-Link DWR-932C E1 firmware, which stems from an OS command injection in debugfcgi. An attacker could exploit this vulnerability to perform command injection via a crafted HTTP...

10CVSS1.9AI score0.07127EPSS
Exploits0References1
NVD
NVD
added 2021/11/23 10:15 p.m.19 views

CVE-2021-42784

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS0.07127EPSS
Exploits0References1
Prion
Prion
added 2021/11/23 10:15 p.m.20 views

Command injection

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

10CVSS9.7AI score0.07127EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/11/23 10:15 p.m.14 views

Authentication flaw

Missing Authentication for Critical Function vulnerability in debugpostset.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute administrative actions...

10CVSS9.6AI score0.03792EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/11/23 9:37 p.m.52 views

CVE-2021-42783

The CVE-2021-42783 issue affects the D-Link DWR-932C E1 firmware, where a Missing Authentication for Critical Function in debug_post_set.cgi enables an unauthenticated attacker to perform administrative actions. The vulnerability is documented with a high-severity CVSS score (3.1: 9.8; 2.0: 10.0)...

10CVSS9.8AI score0.03792EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/11/23 9:37 p.m.51 views

CVE-2021-42784

CVE-2021-42784 describes an OS command injection in the debug_fcgi component of the D-Link DWR-932C E1 firmware. A remote attacker could exploit a crafted HTTP request to execute commands on the device, with high impact across confidentiality, integrity, and availability per CVSS 3.1/3.0 scores i...

10CVSS9.8AI score0.07127EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/23 9:37 p.m.14 views

CVE-2021-42784 OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4

OS Command Injection vulnerability in debugfcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP request...

9.9AI score0.07127EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.6 views

D-Link Dwr-932C E1 访问控制错误漏洞

The D-Link Dwr-932C E1 is a WiFi mobile modem router from D-Link, a Chinese company. A security vulnerability exists in the D-Link DWR-932C E1 firmware, stemming from a lack of critical function authentication in post set.cgi, which could be exploited by attackers to perform administrative action...

10CVSS5.7AI score0.03792EPSS
Exploits0References2
Rows per page
Query Builder