424 matches found
Motorola CX2 操作系统命令注入漏洞
The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability in HNAP1 GetNetworkTomographySettings in the Motorola CX2 router CX allows an attacker to exploit the vulnerability to execute arbitrary code...
The vulnerability of D-Link DIR-823G router’s microprogramming software lies in the lack of measures to sanitize input data in the Username field. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures for cleaning incoming data in the Username field. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
D-Link DIR-846 Arbitrary OS Command Execution Vulnerability
The D-Link DIR-846 is a 6-antenna 1200M full gigabit dual-band MU-MIMO wireless router. An arbitrary OS command execution vulnerability exists in the D-Link DIR-846 with firmware version 100A35. A remote attacker can exploit the vulnerability by sending /HNAP1/ request to...
CVE-2019-17510
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...
CVE-2019-17510
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...
CVE-2019-17509
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...
Design/Logic Flaw
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...
Design/Logic Flaw
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...
CVE-2019-17509
CVE-2019-17509 affects D-Link DIR-846 devices with firmware 100A35. Remote attackers with admin access can execute arbitrary OS commands as root by sending a crafted /HNAP1/ SetMasterWLanSettings request to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php using shell metacharacters. The...
CVE-2019-17510
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetWizardConfig with shell metacharacters to /squashfs-root/www/HNAP1/control/SetWizardConfig.php...
CVE-2019-17510
CVE-2019-17510 affects D-Link DIR-846 devices running firmware 100A35, allowing remote attackers with admin access to execute arbitrary OS commands as root via a /HNAP1/ SetWizardConfig.php request using shell metacharacters. The issue targets the SetWizardConfig path under /squashfs-root/www/HNA...
The vulnerability of D-Link DIR-823G router’s microprogramming software, related to the lack of data cleaning measures at the management level, allows attackers to enhance their privileges and execute arbitrary commands.
The vulnerability of D-Link DIR-823G router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands via the /HNAP1 command...
CVE-2019-15529
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...
CVE-2019-15528
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...
CVE-2019-15526
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482...
CVE-2019-15530
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...
CVE-2019-15529
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...
CVE-2019-15530
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...
CVE-2019-15527
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...
Command injection
An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...