CVE-2022-37129

CVE-2022-37129 affects the D-Link DIR-816 A2 with firmware version 1.10CNB04. The vulnerability is a remote command injection via the HTTP endpoint /goform/SystemCommand . User-supplied parameter “command” is spliced into a local buffer (byte_4836B0) using snprintf and then executed through a cal...

CVE-2022-37133

The CVE-2022-37133 entry concerns D-Link DIR-816 DIR-816 A2 firmware A2_v1.10CNB04.img. The issue allows rebooting the router without authentication via the /goform/doReboot endpoint; a reboot is executed when the function returns, with no authentication required. This yields an impact to availab...

CVE-2022-29324

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd...