CVE-2019-15529

Summary: CVE-2019-15529 affects D-Link DIR-823G devices, specifically firmware v1.0.2B05, where a command injection vulnerability exists in HNAP1 during Login via shell metacharacters in the Username field. The issue is exploitable with authentication. Affected component: HNAP1 login mechanism on...

CVE-2019-15530

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...

CVE-2019-15530

The CVE-2019-15530 issue affects D-Link DIR-823G devices running firmware V1.0.2B05. A command injection vulnerability exists in HNAP1, exploitable via shell metacharacters in the LoginPassword field when attempting to login. This is exploitable with authentication and can impact device integrity...

CVE-2019-15529: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...

PT-2019-3258

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description The issue is related to the lack of data sanitization on the management level of the D-Link DIR-823G router's firmware. This can be exploited by a remote attacker to elevate privileges and execute...

PT-2019-3736

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G versions V1.0.2B05 Description The issue is related to the lack of input validation in the SetStaticRouteSettings field, allowing for command injection via shell metacharacters in the Interface field. This can be exploited by a...

PT-2019-3735

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description The issue is related to the lack of input validation in the Username field, allowing for command injection via shell metacharacters. This can be exploited by a remote attacker to impact the...

PT-2019-14247

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This issue occurs due to shell metacharacters in the MaxIdTime field when using the...

PT-2019-14246

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This occurs via shell metacharacters in the Type field to SetWanSettings. Recommendations F...

CVE-2019-15526: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482...

CVE-2019-15528: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...

CVE-2019-15530: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...

CVE-2019-15527: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...

PT-2019-5830

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 version 100A35 Description The issue is related to insufficient argument checking in the SetMasterWLanSettings function of the D-Link DIR-846 firmware, allowing remote attackers to execute arbitrary OS commands as root. This can...

D-Link DIR-818LW Multiple Vulnerabilities (2019 - 2025)

D-Link DIR-818LW devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

CVE-2019-13482

CVE-2019-13482 affects D-Link DIR-818LW devices with firmware 2.06betab01. The issue is a command injection in HNAP1, exploitable via shell metacharacters in the Type field when calling SetWanSettings, and requires authentication. CVSS metrics indicate network exposure with high impact on confide...