3669 matches found
CVE-2022-36570: Out-of-bounds Write
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at /goform/SetLEDCfg...
CVE-2022-36620: Improper Validation of Specified Quantity in Input
D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...
CVE-2022-37129: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
CVE-2022-37128: Improper Initialization
In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...
PT-2022-23513 · D Link · D-Link Dir-816 +1
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04 D-link DIR-878 version DIR 878 FW1.30B08.img Description: The issue is related to a Buffer Overflow that can be triggered via the "/goform/addRouting" API endpoint. This allows for potential exploitation...
D-Link DIR-816 操作系统命令注入漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. The D-Link DIR-816 A2v1.10CNB04.img suffers from an operating system command injection vulnerability that stems from being susceptible to command injection via /goform/form2userconfig.cgi...
CVE-2022-36571: Out-of-bounds Write
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at /goform/WanParameterSetting...
CVE-2022-36568: Out-of-bounds Write
Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList...
CVE-2022-37125: Improper Neutralization of Special Elements used in a Command
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
PT-2022-23856 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6AC1200 v5.0 Firmware versions v02.03.01.114 and below Description: The issue allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to "goform/setWizard". This enables...
CVE-2022-37176: Undefined Security Weakness
Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard...
Tenda AC6 安全漏洞
Tenda AC6 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC6 AC1200 v5.0 Firmware version v02.03.01.114 and prior versions. An attacker can exploit this vulnerability by removing the Wi-Fi password and forcing the device into open security mode via a specially...
CVE-2022-37292: Out-of-bounds Write
Tenda AX12 V22.03.01.21CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub42FDE4 function, which satisfies the request of the upper-level interface function sub430124, that is, handles the post request under /goform/SetIpMacBind...
CVE-2022-37133
D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the mirrored version of the D-Link DIR-816 firmware A2v1.10CNB04.img, which stems from a reboot that will be executed when the function finally returns and does not require authentication by th...
PT-2022-23829 · D Link · Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version 1.10CNB04 Description: The issue allows the router to reboot without authentication via the "/goform/doReboot" API endpoint. No authentication is required, and the reboot is executed when the function returns at the end...
CVE-2022-37133: Improper Resource Shutdown or Release
D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...
CVE-2022-37134: Improper Validation of Specified Quantity in Input
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...
PT-2022-23830 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04.img Description: The issue arises from a Buffer Overflow vulnerability via the /goform/form2Wan.cgi endpoint. When wantype is 3, the l2tp usrname will be decrypted by base64, and the result will be stored ...
