CVE-2024-33112

CVE-2024-33112 affects D-Link DIR-845L routers (v1.01KRb03 and earlier). The root cause is a command-injection vulnerability in the hnap_main() function when handling GetDeviceSettings via the HNAP interface, enabling remote attackers to execute arbitrary commands. Exploitation is network-vector ...

CVE-2024-33113

CVE-2024-33113 affects D-LINK DIR-845L firmware

CVE-2024-29385

The CVE concerns a D-Link DIR-845L router vulnerability (

CVE-2024-33111

D-Link DIR-845L devices (firmware

CVE-2022-36755

CVE-2022-36755 affects D-Link DIR845L A1 with an authentication flaw exploitable via an AUTHORIZED_GROUP=1 value, demonstrated by a getcfg.php request. CVSSv3.1 base score 9.8 (CRITICAL) with network access, no user interaction required, and impacts on confidentiality, integrity, and availability...

CVE-2024-29366

DIR-845L routers with firmware <= 1.01KRb03 are vulnerable to a command injection in the cgibin binary, allowing arbitrary command execution. Affected product: D-Link DIR-845L (firmware

CVE-2024-33110

The CVE-2024-33110 issue affects D-Link DIR-845L routers (versions v1.01KRb03 and earlier) and is caused by a permission bypass in the getcfg.php component due to inadequate access control around the AUTHORIZED GROUP parameter. This can enable a remote attacker to bypass security restrictions, po...

CVE-2022-38557

CVE-2022-38557 affects D‑Link DIR845L devices (v1.00–v1.03) with a Static Default Credential vulnerability in the startup script at /etc/init0.d/S80telnetd.sh. Root cause: use of default credentials that may enable unauthorized Telnet access; impact per sources is high, with a CVSS v3.1 score of ...

CVE-2022-36756

DIR-845L A1 (v1.00–v1.03) is affected by a command-injection vulnerability exposed at /htdocs/upnpinc/gena.php. The root cause and fixed version are not detailed in the provided documents. Impact is described as high (remote code execution potential). CVSSv3.1 base score 9.8 (network attack with ...