CVE-2019-17508

The CVE-2019-17508 entry covers command-injection on D-Link DIR-859 (A3-1.06) and DIR-850 (A1.13) devices via /etc/services/DEVICE.TIME.php, exploitable through the $SERVER variable. Multiple connected documents corroborate a remote-code-execution risk with high impact: CVSS v3.1 base score 9.8 (...

CVE-2022-25106

The CVE-2022-25106 entry concerns D-Link DIR-859 with firmware v1.05, where a stack-based buffer overflow in the function genacgi_main is exploitable to trigger a Denial of Service via a crafted payload. Affected product is the D-Link DIR-859 router; impact as stated is DoS (availability), with C...

CVE-2024-57045

CVE-2024-57045 concerns the D-Link DIR-859 router (firmware A3 1.05 and earlier). The connected Nuclei template confirms a critical information disclosure via an unauthenticated request to /getcfg.php, retrieving sensitive device account information and potentially admin credentials. The underlyi...