Lucene search
+L

191 matches found

attackerkb
attackerkb
•added 2021/10/25 5:15 p.m.•22 views

CVE-2021-34861

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

8.8CVSS7.6AI score0.00821EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/10/25 5:15 p.m.•11 views

CVE-2021-34860

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

6.5CVSS6.5AI score0.01456EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/10/25 5:15 p.m.•22 views

CVE-2021-34862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

8.8CVSS7.6AI score0.00821EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/10/25 5:15 p.m.•11 views

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS7.6AI score0.0148EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2021/10/25 5:15 p.m.•29 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

5.8CVSS8.8AI score0.00821EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/10/25 5:10 p.m.•55 views

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS9AI score0.0148EPSS
SaveExploits0References2
CVE
CVE
•added 2021/10/25 5:10 p.m.•83 views

CVE-2021-34861

This CVE affects D-Link DAP-2020 routers, specifically version 1.01rc001, where the webproc endpoint handling on TCP port 80 does improper length validation of user data, causing a stack-based overflow that can allow root-level code execution by network-adjacent attackers with no authentication. ...

8.8CVSS8.8AI score0.00821EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•5 views

CVE-2021-34861: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

8.8CVSS6.7AI score0.00821EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•7 views

CVE-2021-34860: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

6.5CVSS5.8AI score0.01456EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•5 views

CVE-2021-34862: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

8.8CVSS6.7AI score0.00821EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/25 12:00 a.m.•5 views

CVE-2021-34863: Stack-based Buffer Overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS6.7AI score0.0148EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/08/19 12:00 a.m.•52 views

D-Link DAP-2020 Stack Buffer Overflow Vulnerability (CNVD-2021-67523)

The D-Link DAP-2020 is a wireless N access point. The D-Link DAP-2020 is vulnerable to a stack buffer overflow vulnerability caused by incorrect boundary checking of the var:menu parameter in the webproc endpoint, which could be exploited by an attacker to cause a buffer overflow and execute...

8.8CVSS4.5AI score0.00821EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/19 12:00 a.m.•68 views

D-Link DAP-2020 Stack Buffer Overflow Vulnerability

The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by incorrect boundary checking of the var:page parameter in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execu...

8.8CVSS4.4AI score0.0148EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/08/19 12:00 a.m.•77 views

D-Link DAP-2020 Stack Buffer Overflow Vulnerability (CNVD-2021-67522)

The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by a failure to properly boundary check in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execute arbitrary code...

8.8CVSS4.4AI score0.00821EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/08/18 12:00 a.m.•18 views

D-Link DAP-2020 security vulnerability

The D-Link DAP-2020 is a wireless N access point. The D-Link DAP-2020 is vulnerable to a stack buffer overflow vulnerability caused by incorrect boundary checking of the var:menu parameter in the webproc endpoint, which could be exploited by an attacker to cause a buffer overflow and execute...

8.8CVSS6.7AI score0.00821EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/08/18 12:00 a.m.•23 views

PT-2021-20708 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

6.5CVSS6.2AI score0.01456EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2021/08/18 12:00 a.m.•26 views

D-Link DAP-2020 security vulnerability

The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by incorrect boundary checking of the var:page parameter in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execu...

8.8CVSS6.7AI score0.0148EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/08/18 12:00 a.m.•25 views

D-Link DAP-2020 security vulnerability

The D-Link DAP-2020 is a wireless N access point. A stack buffer overflow vulnerability exists in the D-Link DAP-2020, which is caused by a failure to properly boundary check in the webproc endpoint. An attacker could exploit the vulnerability to cause a buffer overflow and execute arbitrary code...

8.8CVSS6.7AI score0.00821EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/03/12 12:00 a.m.•14 views

PT-2020-6512 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to a stack-based buffer overflow when handling the var:menu parameter provided to the "webproc" endpoint. This occurs due to the lack of proper validation of the length of...

8.8CVSS8.9AI score0.00821EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2020/03/12 12:00 a.m.•26 views

PT-2020-6504 · D Link · D-Link Dap-2020

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2020 version 1.01rc001 Description: The issue is related to a stack-based buffer overflow when handling the var:page parameter provided to the "webproc" endpoint. This occurs due to the lack of proper validation of the length of...

8.8CVSS8.8AI score0.0148EPSS
SaveExploits0References7
Rows per page
Query Builder