CVE-2020-15633

CVE-2020-15633 affects D-Link DIR-867-US, DIR-878, and DIR-882-US routers with firmware 1.20B10_BETA. The root cause is incorrect string matching in the handling of HNAP requests, enabling network-adjacent attackers to bypass authentication and potentially escalate privileges to execute code in t...

CVE-2019-9124

The CVE-2019-9124 entry affects D-Link DIR-878 (firmware 1.12B01). A vulnerability at the /HNAP1 URI allows login with a blank password due to weaknesses in HNAP1 authentication. This enables network-accessible (remote) compromise of confidentiality, integrity, and availability. Several sources c...

CVE-2019-9125

CVE-2019-9125 affects D-Link DIR-878 (firmware 1.12B01). The root cause is misuse of strncpy causing a stack-based buffer overflow that can be exploited remotely without authentication via HNAP_AUTH. Documentation consistently notes impact to confidentiality, integrity, and availability. Public d...