D-Link DIR-816 命令注入漏洞

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which stems from being susceptible to command injection via /goform/NTPSyncWithHost...

CVE-2022-37082

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hosttime parameter at the function NTPSyncWithHost...

CVE-2022-37082

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hosttime parameter at the function NTPSyncWithHost...

Command injection

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hosttime parameter at the function NTPSyncWithHost...

CVE-2022-36479

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36479

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36479

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36459

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36459

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36459

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

Command injection

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

Command injection

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-37082

CVE-2022-37082 affects TOTOLINK A7000R, specifically version 9.1.0u.6115_B20201022. The issue is a command injection via the host_time parameter in the NTPSyncWithHost function. The reported CVSS3.1 measurement indicates a Local attack with Low privileges and no user interaction, but High impact ...

CVE-2022-37082

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hosttime parameter at the function NTPSyncWithHost...

CVE-2022-36479

TOTOLINK N350RT v9.3.5u.6139_B20201216 is affected by a local command-injection in NTPSyncWithHost via the host_time parameter. Root cause: unvalidated host_time input enables arbitrary commands, impacting confidentiality, integrity, and availability (CVSS v3.1: 7.8). Exploitation could require l...

CVE-2022-36479

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36459

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...

CVE-2022-36459

CVE-2022-36459 affects TOTOLINK A3700R (v9.1.2u.6134_B20201202). The vulnerability is a command injection via the host_time parameter in the NTPSyncWithHost function. Public references indicate an in-device command execution path that could allow an attacker with local access to run arbitrary com...

CVE-2022-37082: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the hosttime parameter at the function NTPSyncWithHost...

CVE-2022-36479: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the hosttime parameter in the function NTPSyncWithHost...