CVE-2023-50209

CVE-2023-50209 affects D-Link G416 wireless routers. The cfgsave function in the HTTP service (port 80) has a stack-based buffer overflow due to improper validation of user-supplied data, enabling remote, network-adjacent attackers to execute arbitrary code with root privileges without authentica...

CVE-2023-50209 D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-50208

CVE-2023-50208 affects D-Link G416 ovpncfg, where the HTTP service on TCP/80 has a stack-based buffer overflow due to improper validation of user-supplied data. This allows network-adjacent attackers (no authentication) to execute arbitrary code with root privileges on affected G416 routers. The ...

CVE-2023-50207

CVE-2023-50207 affects D-Link G416 routers with a command-injection flaw in the HTTP service on port 80. The issue arises from improper validation of a user-supplied string used to construct a system call, allowing network-adjacent attackers to execute code with root privileges. Public documents ...

CVE-2023-50205 D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability

D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50205

The CVE-2023-50205 issue affects D-Link G416 routers, specifically the awsfile chmod command path in the HTTP service on port 80. The vulnerability stems from insufficient validation of a user-supplied string used to invoke a system call, enabling remote code execution with root privileges by an ...

CVE-2023-50206 D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl querytype edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2023-50204

CVE-2023-50204 describes a command-injection remote code execution in the D-Link G416 wireless router. The flaw resides in the HTTP service (TCP port 80) and stems from insufficient validation of a user-supplied string used to perform a system call, allowing network-adjacent attackers to execute ...

CVE-2023-50202 D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specif...

CVE-2023-50202

CVE-2023-50202 affects the D-Link G416 flupl pythonmodules component. The issue is a command injection in the HTTP service on port 80 caused by improper validation of a user-supplied string before executing a system call, allowing network-adjacent attackers to execute code with root privileges. T...

CVE-2023-50203 D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50203

CVE-2023-50203 – D-Link G416 : A command injection exists in the router’s nodered chmod function, exploitable via HTTP (port 80) with no authentication. The flaw validates a user-supplied string poorly, allowing an attacker to execute code as root on affected devices. Multiple sources (ZDI adviso...

CVE-2023-50201 D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50201 D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2023-50201

D-Link G416: remote code execution via cfgsave upusb command injection in the HTTP service (port 80). Root context achieved by abusing insufficient validation of a user-supplied string to execute a system call. Affected product is the D-Link G416 router; attack vector is network-adjacent with no ...

CVE-2023-50200 D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exist...

CVE-2023-50198 D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2023-50198

The CVE-2023-50198 issue affects the D-Link G416 wireless router. A command-injection vulnerability in the HTTP service (port 80) allows network-adjacent attackers to inject commands and execute code with root privileges due to insufficient validation of user-supplied input before a system call. ...

CVE-2023-44445

NETGEAR CAX30 SSO stack-based buffer overflow (CVE-2023-44445) affects the sso binary. Lack of proper length validation on user data copied into a fixed-size stack buffer enables network-adjacent attackers to execute arbitrary code with root privileges. No authentication required; impact describe...

CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target...