CVE-2024-34950

The CVE-2024-34950 issue affects D-Link DIR-822+ firmware v1.0.5, with a stack-based buffer overflow in the SetNetworkTomographySettings module. Public sources describe potential impact as DoS (CNNVD), while PT-Security notes remote arbitrary code execution, indicating possible high-risk exposure...

CVE-2024-33343

CVE-2024-33343 affects D-Link DIR-822+ V1.0.5; the ChgSambaUserSettings() function in prog.cgi allows command injection via shell due to lack of proper sanitization of the samba name parameter. This enables remote command execution on the device. Red Hat/NVD entries corroborate the vulnerability ...

CVE-2024-33344

The CVE-2024-33344 entry concerns the D-Link DIR-822+ firmware (V1.0.5). The authenticated/rootless issue is a command injection in the ftext() function of upload_firmware.cgi, enabling remote attackers to execute arbitrary shell commands. Exploitation would be over the network with no user inter...

CVE-2024-33342

CVE-2024-33342 affects D-Link DIR-822+ (V1.0.5). A command injection exists in the SetPlcNetworkpwd function of prog.cgi, enabling remote attackers to execute arbitrary shell commands. Impact is remote code execution with network access, no user interaction required. Public sources (NVD/Red Hat/C...