Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
d-link dir-878 firmware vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2020-15633
This vulnerability allows network-adjacent malicious users to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within ...
D-link Dir-867 Firmware
D-link Dir-878 Firmware
D-link Dir-882 Firmware -
9.8
CVSSv3
CVE-2019-9124
An issue exists on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.
D-link Dir-878 Firmware 1.12b01
9.8
CVSSv3
CVE-2019-9125
An issue exists on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.
D-link Dir-878 Firmware 1.12b01
9.8
CVSSv3
CVE-2022-44202
D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.
Dlink Dir-878 Firmware 1.02b04
Dlink Dir-878 Firmware 1.02b05
9.8
CVSSv3
CVE-2021-44882
D-Link device DIR_878_FW1.30B08_Hotfix_02 exists to contain a command injection vulnerability in the twsystem function. This vulnerability allows malicious users to execute arbitrary commands via a crafted HNAP1 POST request.
Dlink Dir-878 Firmware
Dlink Dir-878 Firmware 1.30b08
9.8
CVSSv3
CVE-2021-44880
D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows malicious users to execute arbitrary commands via a crafted HNAP1 POST request...
Dlink Dir-878 Firmware
Dlink Dir-878 Firmware 1.30b08
Dlink Dir-882 Firmware
Dlink Dir-882 Firmware 1.30b06
9.8
CVSSv3
CVE-2021-30072
An issue exists in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication.
Dlink Dir-878 Firmware
8.8
CVSSv3
CVE-2022-26670
D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service.
Dlink Dir-878 Firmware
9.8
CVSSv3
CVE-2022-44801
D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control.
Dlink Dir-878 Firmware 1.02b05
9.8
CVSSv3
CVE-2022-43184
D-Link DIR878 1.30B08 Hotfix_04 exists to contain a command injection vulnerability via the component /bin/proc.cgi.
Dlink Dir-878 Firmware 1.30b08
1 Github repository
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
logic flaw
CVE-2024-23692
CVE-2024-26229
CVE-2024-35255
CVE-2024-5835
CVE-2024-5837
XML external entity
dos
CVE-2024-5813
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »