52 matches found
CVE-2025-6328 D-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow
A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public a...
D-Link DIR-815 安全漏洞
The D-Link DIR-815 is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-815 version 1.01, which originates from the failure of the function sub403794 in the file hedwig.cgi to correctly validate the length and size of the input data, and can be...
PT-2025-26295 · D Link · D-Link Dir-815
Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 version 1.01 Description: A critical vulnerability was found in the D-Link DIR-815, affecting the function sub 403794 of the file hedwig.cgi. This vulnerability leads to a stack-based buffer overflow and can be initiated...
D-Link DAP-1650 EOL Device Directory Traversal Vulnerability (Jul 2024)
D-Link DAP-1650 devices are prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
CVE-2024-40505
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component...
PT-2024-28884 · D Link · D-Link Dap-1650
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1650 Firmware version 1.03 Description: A Directory Traversal issue allows a local attacker to escalate privileges via the hedwig.cgi component. Recommendations: For D-Link DAP-1650 Firmware version 1.03, consider restricting acces...
CVE-2024-40505
Summary: CVE-2024-40505 is a directory traversal vulnerability in D-Link DAP-1650 firmware v1.03, exploitable by a local attacker via hedwig.cgi to achieve privilege escalation. The vulnerability affects the device’s firmware components and has a high impact on confidentiality, integrity, and ava...
VulnCheck KEV: CVE-2024-0769
D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling...
CVE-2024-0769
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...
CVE-2024-0769 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...
D-Link DIR-859 Path Traversal Vulnerability
The D-Link DIR-859 is a wireless router from China's AUO D-Link. A path traversal vulnerability exists in the D-Link DIR-859 version 1.06B01, which stems from the parameter service in the file /hedwig.cgi that causes path traversal...
The vulnerability of the hedwig.cgi file in the D-LINK GO-RT-AC750 router microprogramming system allows a hacker to execute any command they desire.
The vulnerability of the hedwig.cgi file of the D-LINK GO-RT-AC750 router’s microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Exploit for OS Command Injection in Dlink Go-Rt-Ac750_Firmware
CVE-2023-48842 Source : D-Link Go-RT-AC750 revAv101b03 w...
CVE-2023-48842
D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...
CVE-2023-48842
D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...
Command injection
D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi...
CVE-2023-48842
CVE-2023-48842 affects D-Link Go-RT-AC750 revA_v101b03. A command-injection exists in hedwig.cgi via the service parameter, allowing execution of arbitrary commands on the device. The CVE is rated CRITICAL (CVSS v3.1: 9.8, Network attack, no privileges required, no user interaction). Multiple sou...