d-link dir-620 firmware 1.4.0 vulnerabilities and exploits

(subscribe to this query)

In the web server on D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, there is a hardcoded password of anonymous for the admin account.

D-link Dir-620 Firmware 1.0.3 D-link Dir-620 Firmware 1.0.37 D-link Dir-620 Firmware 1.3.1 D-link Dir-620 Firmware 1.3.3 D-link Dir-620 Firmware 1.3.7 D-link Dir-620 Firmware 1.4.0 D-link Dir-620 Firmware 2.0.22

On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is possible as a result of incorrect processing of the res_buf parameter to index.cgi.

D-link Dir-620 Firmware 1.0.3 D-link Dir-620 Firmware 1.0.37 D-link Dir-620 Firmware 1.3.1 D-link Dir-620 Firmware 1.3.3 D-link Dir-620 Firmware 1.3.7 D-link Dir-620 Firmware 1.4.0 D-link Dir-620 Firmware 2.0.22

On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting (XSS) attack is possible as a result of missed filtration for special characters in the "Search" fiel...

D-link Dir-620 Firmware 1.0.3 D-link Dir-620 Firmware 1.0.37 D-link Dir-620 Firmware 1.3.1 D-link Dir-620 Firmware 1.3.3 D-link Dir-620 Firmware 1.3.7 D-link Dir-620 Firmware 1.4.0 D-link Dir-620 Firmware 2.0.22

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook