CVE-2023-43238

The CVE-2023-43238 vulnerability affects D-Link DIR-816 A2 firmware (version 1.10CNB05). A stack overflow is triggered in the form2Dhcpip.cgi component via the nvmacaddr parameter, exposing potential impact to confidentiality, integrity, and availability. The available sources describe a memory o...

CVE-2023-43240

CVE-2023-43240 affects D-Link DIR-816 A2 firmware v1.10CNB05, where a stack overflow can be triggered via the sip_address parameter in ipportFilter. The vulnerability is network-exploitable with no authentication or user interaction required, and the CVSS metrics indicate HIGH impact on confident...

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 is affected by a command injection in the iptablesWebsFilterRun function, enabling remote attackers to execute arbitrary shell commands. This vulnerability has been described across multiple sources (including Red Hat/CVE data and PT Security advisories) with a consiste...

CVE-2024-0921

CVE-2024-0921 affects D-Link DIR-816 A2 (firmware 1.10CNB04). The Web Interface file /goform/setDeviceSettings is vulnerable; manipulating the statuscheckpppoeuser parameter enables OS command injection. Attacks can be launched remotely and exploit details have been publicly disclosed. Multiple s...

CVE-2023-43236

D-Link DIR-816 A2 (firmware v1.10CNB05) contains a stack overflow in the dir_setWanWifi function triggered by the statuscheckpppoeuser parameter. Public references (NVD/Red Hat) confirm impact to confidentiality, integrity, and availability (C/H/I/A) with high severity; CVSSv3.1 vectors indicate ...

CVE-2023-43237

CVE-2023-43237 affects the D-Link DIR-816 A2 router with firmware version 1.10CNB05. The vulnerability is a stack overflow in the setMAC function triggered via the macCloneMac parameter, as described in multiple sources (NVD/Red Hat/CVE list entries). Impact is stated as high to critical in the m...

CVE-2023-43239

Affected product: D-Link DIR-816 A2 (firmware version 1.10CNB05). Issue: a stack overflow in the showMACfilterMAC function triggered by the flag_5G parameter. Impact is described as high for confidentiality, integrity, and availability (per sources citing a stack overflow vulnerability with overa...

CVE-2018-17064

The CVE-2018-17064 entry concerns D-Link DIR-816 A2 (firmware 1.10 B05). The /goform/sylogapply handler builds a command string using the syslogIp HTTP parameter after /goform/clearlog, enabling potential command injection. Root cause: lack of input neutralization in command construction. Impact:...

CVE-2018-17065

CVE-2018-17065 affects D-Link DIR-816 A2 (firmware 1.10 B05). The flaw is a stack-based buffer overflow in the /goform/DDNS handler caused by processing very long passwords, which can overwrite the return address. Connected sources corroborate the affected product and vulnerability class. No offi...

CVE-2018-17066

CVE-2018-17066 affects D-Link DIR-816 A2 with firmware 1.10 B05. The /goform/form2systime.cgi handler builds a command string using the HTTP datetime parameter, allowing command injection via shell metacharacters. Network-accessible in the affected device with no authentication required, and the ...

CVE-2018-17067

CVE-2018-17067 affects D-Link DIR-816 A2 firmware (1.10 B05). A stack-based buffer overflow can occur when sending an excessively long password to /goform/formLogin, potentially overwriting the return address. Public entries across CNVD/CVELIST/NVD corroborate a buffer overflow in the DIR-816 A2,...

CVE-2018-17063

CVE-2018-17063 affects D‑Link DIR-816 A2 firmware 1.10 B05. In the NTPSyncWithHost handler, an HTTP request parameter is used to construct a shell command, enabling command injection via shell metacharacters . A remote attacker could potentially execute arbitrary commands on the device. Public so...

CVE-2018-17068

An explicit vulnerability entry exists for D-Link DIR-816 A2 with firmware 1.10 B05 (DIR-816) where the HTTP /goform/Diagnosis handler builds a command string using the sendNum parameter, enabling command injection via shell metacharacters. Connected CNVD/CVEs reiterate that this is a command-inj...