Lucene search
+L

54 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/31 12:00 a.m.14 views

The vulnerability of the Ping_addr function in D-Link DIR810LA1FW102B22 microprogrammed router software allows a hacker to execute arbitrary code. [source-iocs-preserved const=DIR810LA1_FW102B22]

The vulnerability of the Pingaddr function in D-Link DIR810LA1FW102B22 microprogrammed router software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code. source-iocs-preserved const=DIR810LA1FW102B2...

5.5CVSS8.1AI score0.23461EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/08/03 3:15 p.m.6 views

CVE-2022-34974

D-Link DIR810LA1FW102B22 was discovered to contain a command injection vulnerability via the Pingaddr function...

9.8CVSS5.9AI score0.23461EPSS
SaveExploits1References3
OSV
OSV
added 2022/08/03 3:15 p.m.12 views

CVE-2022-34974

D-Link DIR810LA1FW102B22 was discovered to contain a command injection vulnerability via the Pingaddr function...

9.8CVSS5.8AI score0.23461EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/03 12:00 a.m.12 views

PT-2022-4537 · D Link · D-Link Dir810La1 Fw102B22

Name of the Vulnerable Software and Affected Versions: D-Link DIR810LA1 FW102B22 Description: The issue is related to the lack of input data sanitization in the Ping addr function of the D-Link DIR810LA1 FW102B22 router's firmware. This can be exploited by a remote attacker to execute arbitrary...

9.8CVSS9.6AI score0.23461EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/08/03 12:00 a.m.12 views

D-Link DIR-820L 命令注入漏洞

The D-Link DIR-820L is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-820LA1FW102B22, which stems from its Pingaddr function that can lead to command injection...

9.8CVSS8.3AI score0.23461EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.6 views

CVE-2022-30425

Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request...

9CVSS7.4AI score0.19951EPSS
SaveExploits2References4
OSV
OSV
added 2022/06/02 2:15 p.m.12 views

CVE-2022-30425

Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request...

8.8CVSS7.4AI score0.19951EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:00 a.m.19 views

The vulnerability of the implementation of the SetNetworkTomographySettings() function in the microprogrammed software for D-Link DIR-823-Pro wireless routers allows a hacker to execute arbitrary commands.

The vulnerability of the implementation of the SetNetworkTomographySettings function in the microprogrammed wireless router software from D-Link DIR-823-Pro relates to insufficient cleaning of input data during the processing of parameters tomographypingaddress, tomographypingnumber,...

10CVSS8.1AI score0.03746EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/02/04 2:15 a.m.16 views

CVE-2021-46452

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...

9.8CVSS6AI score0.03746EPSS
SaveExploits0References3
Talos
Talos
added 2018/11/19 12:00 a.m.363 views

TP-Link TL-R600VPN HTTP server ping address remote code execution vulnerability

Summary An exploitable remote code execution vulnerability exists in the ping and tracert functionality of the TP-Link TL-R600VPN http server. A specially crafted IP address can cause a stack overflow, resulting in remote code execution. An attacker can send a single authenticated HTTP request to...

8.8CVSS8.2AI score0.02917EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:00 a.m.16 views

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

10CVSS8.2AI score0.82863EPSS
SaveExploits8References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:00 a.m.14 views

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

10CVSS8.2AI score0.82863EPSS
SaveExploits8References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:00 a.m.12 views

The vulnerability of D-Link and TRENDnet’s microprogrammed router services allows attackers to execute arbitrary commands or bypass authentication mechanisms, thereby gaining full control over the device.

The vulnerability of D-Link and TRENDnet’s microprogrammed router software services is related to deficiencies in the authentication process when processing the ping command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingaddr parameter...

10CVSS8.2AI score0.82863EPSS
SaveExploits8References8Affected Software1
Positive Technologies
Positive Technologies
added 2014/11/30 12:00 a.m.8 views

PT-2014-1984 · Trendnet +1 · Trendnet +1

Name of the Vulnerable Software and Affected Versions: D-Link devices affected versions not specified TRENDnet devices affected versions not specified Description: The issue is related to a remote code execution problem in the ping tool of multiple D-Link and TRENDnet devices. It is caused by...

10CVSS8.7AI score0.82863EPSS
SaveExploits8References27
Rows per page
Query Builder