Lucene search
K

139 matches found

Prion
Prion
added 2023/01/26 9:15 p.m.15 views

Directory traversal

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W2000EN-01hardware platform Gpn2.4P21-CWIFI-V0.05, via the getpage parameter to /cgi-bin/webproc...

6.4CVSS9AI score0.01303EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/19 12:0 a.m.6 views

PT-2023-1286 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 versions affected versions not specified D-Link DAP-2020 versions affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link routers...

8.8CVSS9.1AI score0.01038EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/01/19 12:0 a.m.6 views

PT-2023-1285 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link routers. Authentication is...

8.8CVSS9AI score0.01101EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.4 views

PT-2022-6605 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: The issue is related to a heap-based buffer overflow in the webproc microprogram of D-Link DAP-2020 and DAP-1360 wireless access...

8.8CVSS8AI score0.00931EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.4 views

PT-2022-6603 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link routers. Authentication is...

8.8CVSS8.8AI score0.01101EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/09/06 12:0 a.m.8 views

PT-2022-6600 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link routers. The specific flaw...

8.8CVSS9.1AI score0.01101EPSS
Exploits0References6
Zero Day Initiative
Zero Day Initiative
added 2021/12/22 12:0 a.m.35 views

D-Link DAP-2020 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webproc endpoin...

8.8CVSS4.5AI score0.01432EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/12/22 12:0 a.m.41 views

D-Link DAP-2020 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoin...

8.8CVSS4.6AI score0.00794EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.2 views

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00794EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.1 views

The vulnerability of the webproc getpage implementation in the microprogramming software for wireless access points from D-Link, DAP-2020, allows a intruder to execute arbitrary code.

The vulnerability of the webproc getpage implementation in the microprogrammed wireless access points from D-Link, such as the DAP-2020, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.8CVSS8.3AI score0.026EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.3 views

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflows in the stack when processing the var:menu parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.8CVSS8.2AI score0.00794EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.3 views

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.

The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflows during the processing of the var:page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.2AI score0.01432EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2021/10/25 5:15 p.m.2 views

CVE-2021-34862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

8.8CVSS6.2AI score
Exploits0References2
OSV
OSV
added 2021/10/25 5:15 p.m.1 views

CVE-2021-34861

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

8.8CVSS7.7AI score0.00794EPSS
Exploits0References2
OSV
OSV
added 2021/10/25 5:15 p.m.4 views

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS6.2AI score0.01432EPSS
Exploits0References2
OSV
OSV
added 2021/10/25 5:15 p.m.4 views

CVE-2021-34860

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...

6.5CVSS5.7AI score0.01409EPSS
Exploits0References2
NVD
NVD
added 2021/10/25 5:15 p.m.13 views

CVE-2021-34862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...

8.8CVSS0.00794EPSS
Exploits0References2
Prion
Prion
added 2021/10/25 5:15 p.m.15 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

5.8CVSS8.8AI score0.01432EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2021/10/25 5:15 p.m.15 views

Stack overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the webproc endpoint, which listens on TCP port 80 by defaul...

5.8CVSS8.8AI score0.00794EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/10/25 5:10 p.m.22 views

CVE-2021-34863

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...

8.8CVSS9AI score0.01432EPSS
Exploits0References2
Rows per page
Query Builder