46 matches found
Milesight UR32L ys_thirdparty check_system_user function command injection vulnerability
The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L ysthirdparty checksystemuser function, which can be exploited by an attacker to execute arbitrary commands on the system...
PT-2023-5278 · D Link · D-Link Dir-645
Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 version 1.03 Description: The issue is related to an Authentication Bypass vulnerability that allows remote attackers to gain escalated privileges. This is due to insufficient access control in the phpcgi main function in cgibi...
The vulnerability in the phpcgi.py script of the D-Link DIR-890L A1 router’s microprogramming software allows a hacker to bypass security restrictions and restore user credentials for accessing the system.
The vulnerability of the phpcgi.py script in the D-Link DIR-890L A1 router microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and restore access credentials to gain entry into the...
The vulnerability of the phpcgi component in D-Link DIR-879 A1 microprogramming router software allows a hacker to bypass security restrictions and restore login credentials for accessing the system.
The vulnerability of the phpcgi component in D-Link DIR-879 A1 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and restore access credentials for entering the system by...
CVE-2023-30061
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi...
Authentication flaw
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi...
D-Link DIR-879 授权问题漏洞
The D-Link DIR-879 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-879 v1.05A1 release version, which stems from an easy authentication bypass via phpcgi...
CVE-2023-30061: Improper Authentication
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi...
PT-2023-2597 · D Link · D-Link Dir-879
Name of the Vulnerable Software and Affected Versions: D-Link DIR-879 version v105A1 Description: The issue is related to a component called phpcgi in the D-Link DIR-879 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to bypass...
CVE-2023-30061
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi...
CVE-2022-46076
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
CVE-2022-46076
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
Authentication flaw
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
CVE-2022-46076
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
CVE-2022-46076
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
CVE-2022-46076: Incorrect Authorization
D-Link DIR-869 DIR869AxFW102B15 is vulnerable to Authentication Bypass via phpcgi...
PT-2022-27733 · D Link · D-Link Dir-869
Name of the Vulnerable Software and Affected Versions: D-Link DIR-869 version DIR869Ax FW102B15 Description: The issue is related to Authentication Bypass via phpcgi. Recommendations: For D-Link DIR-869 version DIR869Ax FW102B15, as a temporary workaround, consider restricting access to the phpcg...
D-Link DIR-869 安全漏洞
The D-Link DIR-869 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-869 DIR869AxFW102B15 version, which stems from an easy authentication bypass via phpcgi...
CVE-2022-46076
CVE-2022-46076 affects D-Link DIR-869 (DIR869Ax_FW102B15) with an Authentication Bypass via phpcgi. CVSSv3.1 base score 7.5 (HIGH). Root cause: authentication bypass in phpcgi interface. Exploitation status in connected data indicates a PoC exists; NVD entry does not confirm active exploits. Docu...