28 matches found
SSDP Component Arbitrary Command Execution
The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
CVE-2026-4499
A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2026-4499: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2022-35619
D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function ssdpcgimain...
CVE-2025-15391
A weakness has been identified in D-Link DIR-806A 100CNb11. Affected is the function ssdpcgimain of the component SSDP Request Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. This...
CVE-2025-15391: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DIR-806A 100CNb11. Affected is the function ssdpcgimain of the component SSDP Request Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. This...
D-Link DIR-852 Router Arbitrary Command Execution
The vulnerability of the ssdpcgimain function in the htodcs/cgibin module of the D-Link DIR-852 router’s microprogramming system is related to the lack of measures taken at the control level to manage data cleanup. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...
CVE-2025-10629
A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgimain of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injection. The attack may be performed from...
CVE-2025-10629: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgimain of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injection. The attack may be performed from...
CVE-2025-9026
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9026: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
D-Link DIR-860L command injection vulnerability
The D-Link DIR-860L is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DIR-860L version 2.04.B04, which originates from an os command injection in the ssdpcgimain function in the htdocs/cgibin file...
D-Link DIR-645 Router Arbitrary Command Execution
The vulnerability of the ssdpcgimain function /htdocs/cgibin of the ssdpcgi component in the D-Link DIR-645 router microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
Command injection
There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...
CVE-2024-22651
There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...
CVE-2024-22651: Improper Neutralization of Special Elements used in a Command
There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...
D-Link DIR-815 Security Vulnerability
The D-Link DIR-815 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-815 v1.04, which originates from a command injection vulnerability in the ssdpcgimain function of the cgibin binary...
D-LINK DIR-818LW Code Execution
The vulnerability of the ssdpcgimain function in the microprogramming software for D-LINK DIR-818LW is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
