CVE-2024-48631

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48630

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parameter in the SetMACFilters2 function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48633

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and LocalIPAddress parameters in the SetVirtualServerSettings function. This vulnerability allows attackers to execute arbitrar...

CVE-2024-48637

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48635

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48634

D-Link DIR-882 (dual-band wireless router) and DIR-878 (wireless router) devices are susceptible to a command injection vulnerability. The flaw exists within the SetWlanRadioSecurity() function in the prog.cgi script of the router's microprogramming software. It is caused by a failure to neutrali...

CVE-2024-48629

D-Link DIR_882_FW130B06 and DIR_878_FW130B08 routers are affected by a command injection vulnerability in the SetGuestZoneRouterSettings function. The flaw is caused by a lack of proper neutralization of special elements used in operating system commands when processing the IPAddress parameter. A...

CVE-2024-48630

D-Link DIR-882 (firmware FW130B06 ) and DIR-878 (firmware FW130B08 ) routers are susceptible to a command injection vulnerability. The flaw exists in the SetMACFilters2() function within the prog.cgi script due to a failure to neutralize special elements used in operating system commands. An atta...

CVE-2024-48633

D-Link DIR_882 (FW130B06) and DIR_878 (FW130B08) routers are vulnerable to command injection due to improper neutralization of special elements used in OS commands. The flaw exists within the SetVirtualServerSettings function of the prog.cgi script. Specifically, an attacker can execute arbitrary...

CVE-2024-48632

D-Link DIR-882 (FW130B06) and DIR-878 (FW130B08) wireless routers are vulnerable to multiple command injection vulnerabilities within the SetPortForwardingSettings function of the prog.cgi script. The root cause is the failure to properly neutralize special elements used in operating system comma...

CVE-2024-48637

D-Link DIR_882 (firmware FW130B06 ) and DIR_878 (firmware DIR_878_FW130B08 ) routers are susceptible to a command injection vulnerability. The root cause is the failure to neutralize special elements used in operating system commands within the SetVLANSettings function of the prog.cgi script. An ...

CVE-2024-48635

D-Link DIR_882 (dual-band wireless router) and DIR_878 (wireless router) are affected by a command injection vulnerability (CWE-78) within the SetVLANSettings function of the prog.cgi script. The root cause is a failure to neutralize special elements used in operating system commands, specificall...

CVE-2024-48636

The D-Link DIR-882 (dual-band wireless router) and DIR-878 (wireless router) are vulnerable to a command injection vulnerability in the SetVLANSettings function. The root cause is the failure to neutralize special elements used in operating system commands, specifically within the VLANID:0/VID pa...

CVE-2024-48638

The D-Link DIR-882 (dual-band wireless router) and DIR-878 (wireless router) contain a command injection vulnerability in the SetGuestZoneRouterSettings function within the prog.cgi script. The root cause is the failure to neutralize special elements used in operating system commands when process...

CVE-2024-48637

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48638

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48629

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48631

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48637: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...

CVE-2024-48634: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR882FW130B06 and DIR878 DIR878FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted POST request...