D-Link DIR-823G Router Privilege Escalation Command Injection

The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands via the /HNAP1 command...

CVE-2019-15529

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...

CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...