Command injection

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login...

CVE-2020-25367

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login...

CVE-2020-25367

CVE-2020-25367: A command-injection in the HNAP1 protocol of D-Link DIR-823G (firmware V1.0.2B05) allows an attacker with network access to log in and execute arbitrary commands via shell metacharacters in the Captcha field. The vulnerability affects the device’s login flow and can impact confide...

CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are...

CVE-2021-29294

Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK1.01, which could let a remove malicious user cause a denial of service via the sendhnapunauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are...

CVE-2021-29294

Affects D-Link DSL-2740R UK 1.01. The vulnerability is a Null Pointer Dereference in the device’s HNAP interface: an attacker can trigger a denial of service by sending a crafted POST to /HNAP1/. Multiple sources (NVD/CNVD/CVE records) describe the same issue and confirm the device is End of Life...

CVE-2020-21937

An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands...

CVE-2020-21935

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code...

Command injection

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code...

Authentication flaw

An issue in HNAP1/GetMultipleHNAPs of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication...

Command injection

An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands...

CVE-2020-21936

The CVE-2020-21936 entry applies to the Motorola CX2 router (CX 1.0.2 Build 20190508 Rel.97360n). A flaw in HNAP1/GetMultipleHNAPs lets an unauthenticated attacker access GetStationSettings, GetWebsiteFilterSettings, and GetNetworkSettings. This is a network‑level issue with low attack complexity...

CVE-2020-21935

A command injection vulnerability in HNAP1/GetNetworkTomographySettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary code...

CVE-2020-21935

CVE-2020-21935 affects Motorola CX2 router CX with version 1.0.2 Build 20190508 Rel.97360n, via the HNAP1/GetNetworkTomographySettings function. The vulnerability enables command injection and arbitrary code execution, with network access and no authentication required per cited records. No remed...

Motorola CX2 访问控制错误漏洞

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability in HNAP1 GetMultipleHNAPs in the Motorola CX2 router CX can be exploited to allow an attacker to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication...

Motorola CX2 操作系统命令注入漏洞

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability in HNAP1 GetNetworkTomographySettings in the Motorola CX2 router CX allows an attacker to exploit the vulnerability to execute arbitrary code...

The vulnerability of D-Link DIR-823G router’s microprogramming software lies in the lack of measures to sanitize input data in the Username field. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures for cleaning incoming data in the Username field. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

D-Link DIR-846 Arbitrary OS Command Execution Vulnerability

The D-Link DIR-846 is a 6-antenna 1200M full gigabit dual-band MU-MIMO wireless router. An arbitrary OS command execution vulnerability exists in the D-Link DIR-846 with firmware version 100A35. A remote attacker can exploit the vulnerability by sending /HNAP1/ request to...

CVE-2019-17510

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...

CVE-2019-17510

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...