CVE-2016-10186

CVE-2016-10186 affects the D-Link DWR-932B router. The issue is that "/var/miniupnpd.conf" has no deny rules, potentially enabling unintended access through UPnP services. The provided metrics indicate a high integrity impact (CVSS 3.1) with network-based, low-complexity access and no authenticat...

CVE-2016-10178: Undefined Security Weakness

An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 UDP launches the "/sbin/telnetd -l /bin/sh" command...

PT-2017-7789

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router affected versions not specified Description An issue was discovered that allows directory listing with ../ traversal through qmiweb. Recommendations For the D-Link DWR-932B router, consider restricting access to the qmiw...

PT-2017-7788

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router affected versions not specified Description An issue was discovered where the qmiweb service provides sensitive information when handling "CfgType=get homeCfg" requests. Recommendations At the moment, there is no...

PT-2017-7790

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router affected versions not specified Description An issue was discovered that allows file reading with ..%2f traversal using qmiweb. Recommendations At the moment, there is no information about a newer version that contains a...

CVE-2016-10184: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal...

CVE-2016-10183: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal...

CVE-2016-10182: Improper Neutralization of Special Elements used in a Command

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with characters...

CVE-2016-10185: Undefined Security Weakness

An issue was discovered on the D-Link DWR-932B router. A securemode=no line exists in /var/miniupnpd.conf...

CVE-2016-10186: Undefined Security Weakness

An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules...

CVE-2016-10181: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=gethomeCfg requests...

CVE-2016-10177: Use of Hard-coded Credentials

An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin with the password admin and root with the password 1234...

CVE-2016-10180: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srandtime0 seeding...

PT-2017-7792

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router affected versions not specified Description An issue was discovered related to the /var/miniupnpd.conf file, which has no deny rules. Recommendations At the moment, there is no information about a newer version that...

PT-2017-7791

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router affected versions not specified Description A security issue was found in the D-Link DWR-932B router, where a secure mode=no line exists in the /var/miniupnpd.conf file. Recommendations At the moment, there is no...

PT-2017-7787 · D Link · Dwr-932B

Name of the Vulnerable Software and Affected Versions: D-Link DWR-932B router affected versions not specified Description: An issue was discovered where WPS PIN generation is based on srandtime0 seeding. This indicates a potential predictability in the PIN generation process, which could be...

PT-2017-7786

Name of the Vulnerable Software and Affected Versions D-Link DWR-932B router affected versions not specified Description An issue was discovered where there is a hardcoded WPS PIN of 28296607. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

CVE-2016-10179: Use of Hard-coded Credentials

An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607...

D-Link DWR-932B LTE router found multiple Backdoor-vulnerability warning-the black bar safety net

! If you have a similar to the DWR-9 3 2 B LTE D-Link router, don't wait for it to slow a firmware upgrade, or directly to give it is better. Allegedly the D-Link DWR-9 3 2 B LTE has more than 2 0 at risk, including Backdoor accounts, the default certificate, leakage of certificate, the firmware...

Unauthorized Access Vulnerability in D-Link DWR-932B LET Router WPS System

The D-Link DWR-932B LET is a wireless router. An unauthorized access vulnerability exists in the WPS system of the D-Link DWR-932B LET router. Since the WPS system PIN is hardcoded into the /bin/appmgr program, an attacker can exploit the vulnerability to use the PIN to access the wireless networ...