CVE-2024-48636

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

PT-2024-7033 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR 882 versions FW130B06 D-Link DIR 878 version FW130B08 Description: A command injection issue exists in the SetWLanRadioSettings function due to insufficient neutralization of special elements used in an OS command. This allows...

CVE-2023-24330

Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/...

CVE-2024-22751

D-Link DIR-882 DIR882A1FW130B06 was discovered to contain a stack overflow via the sub477AA0 function...

PT-2022-19299 · D Link · D-Link Dir-882

Name of the Vulnerable Software and Affected Versions: D-Link DIR882 version DIR882A1 FW130B06 Description: A command injection issue in the /SetTriggerLEDBlink/Blink component allows attackers to escalate privileges to root via a crafted payload. Recommendations: For D-Link DIR882 version DIR882...

PT-2022-19298 · D Link · Dir-882

Name of the Vulnerable Software and Affected Versions: D-Link DIR882 version DIR882A1 FW130B06 Description: A command injection issue exists in the /setnetworksettings/SubnetMask component, allowing attackers to escalate privileges to root by sending a crafted payload. Recommendations: For versio...