CVE-2019-17621

CVE-2019-17621 affects the D-Link DIR-859 router (firmware 1.05/1.06B01 Beta01). The issue is an unauthenticated remote command-execution vulnerability via the UPnP endpoint at /gena.cgi. An attacker on the local network can send a crafted HTTP SUBSCRIBE request to the UPnP service and execute sy...

CVE-2019-20213

D-Link DIR-859 routers are affected by CVE-2019-20213: unauthenticated information disclosure via the AUTHORIZED_GROUP=1%0a value demonstrated by vpnconfig.php on devices running versions prior to 1.07b03_beta. The vulnerability enables exposure of information over the network with no authenticat...

CVE-2017-14948

The CVE-2017-14948 issue affects D-Link DIR-880L (1.08B04) and DIR-895 L/R (1.13b03) due to a buffer overflow in the htdocs/fileaccess.cgi component. A crafted HTTP request where CONTENT_TYPE begins with boundary= and exceeds 256 characters can trigger a buffer overflow, potentially enabling remo...