d-link dir-816 a2 firmware 1.10b05 vulnerabilities and exploits

(subscribe to this query)

Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows unauthenticated remote malicious users to execute arbitrary code via a request with a long HTTP Host header.

D-link Dir-816 A2 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address.

D-link Dir-816 A2 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain a command injection vulnerability via the component /goform/Diagnosis.

Dlink Dir-816 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd.

Dlink Dir-816 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.

Dlink Dir-816 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.

Dlink Dir-816 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain a stack overflow via the pskValue parameter in the setSecurity function.

Dlink Dir-816 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.

Dlink Dir-816 Firmware 1.10b05

D-Link DIR-816 A2 1.10 B05 exists to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm.

Dlink Dir-816 Firmware 1.10b05

An issue exists in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters.

Dlink Dir-816 Firmware 1.10b05

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook