CVE-2013-6026

The web interface of various D-Link , Planex , and Alpha Networks routers is vulnerable to an authentication bypass due to a hardcoded backdoor. An unauthenticated remote attacker can bypass password requirements and modify device settings by including the specific User-Agent header string xmlset...

CVE-2013-6027

CVE-2013-6027 concerns a stack-based buffer overflow in the RuntimeDiagnosticPing function on D-Link DIR-100 routers (/bin/webs). The vulnerability allows remote authenticated administrators to execute arbitrary commands by sending a long set/runtime/diagnostic/pingIp parameter to Tools/tools_mis...