CVE-2018-19986

CVE-2018-19986 concerns a command-injection vulnerability in the D-Link devices DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 via the /HNAP1/SetRouterSettings flow. The Root Cause: the RemotePort parameter is saved to internal configuration memory and later used in an iptables command without ...

CVE-2018-19987

CVE-2018-19987 affects multiple D-Link devices (DIR-822 Rev.B/Rev.C, DIR-860L Rev.B, DIR-868L Rev.B, DIR-880L Rev.A, DIR-890L Rev.A). The vulnerability is in /HNAP1/SetAccessPointMode and is caused by how the IsAccessPoint parameter is handled in SetAccessPointMode.php: it is saved to the ShellPa...

CVE-2018-19989

CVE-2018-19989 affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 via the /HNAP1/SetQoSSettings uplink parameter. In SetQoSSettings.php the uplink value is saved to internal memory at /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth without any regex validation and later consumed by...

CVE-2018-19990

CVE-2018-19990 concerns D-Link DIR-822 B1 202KRb06 where /HNAP1/SetWiFiVerifyAlpha processes WPSPIN in XML and stores it in internal memory without input validation; the do_wps path uses that value with an insecure wpatalk flow. Public references also tag related issues (e.g., CVE-2018-19986) in ...

CVE-2019-6258

CVE-2019-6258 affects D-Link DIR-822 Rev.Bx devices with firmware 202KRb06 and older. Root cause: a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP message, mishandled by /usr/sbin/udhcpd while reading /var/servd/LAN-1-udhcpd.conf. Impact: potential high-severity condition...