dlink dir-823g firmware 1.02b03 vulnerabilities and exploits

(subscribe to this query)

NA

A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an malicious user to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the ...

Dlink Dir-823g Firmware 1.02b03

9

CVSSv2

An issue exists on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings.

Dlink Dir-823g Firmware 1.02b03

5

CVSSv2

An issue exists on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead.

Dlink Dir-823g Firmware 1.02b03

5

CVSSv2

An issue exists in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to get sensitive information (such as MAC address) about all clients in the WLAN via the GetClientInfo HNAP API. Consequently, an at...

Dlink Dir-823g Firmware 1.02b03

7.8

CVSSv2

An issue exists in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote malicious users to reset the router without authentication via the SetFactoryDefault HNAP API. Consequently, an attacker can achieve a denial-of...

Dlink Dir-823g Firmware 1.02b03

5

CVSSv2

An issue exists in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to hijack the DNS service configuration of all clients in the WLAN, without authentication, via the SetWanSettings HNAP API.

Dlink Dir-823g Firmware 1.02b03

9.3

CVSSv2

An issue exists on D-Link DIR-823G devices with firmware up to and including 1.02B03. A command Injection vulnerability allows malicious users to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system funct...

Dlink Dir-823g Firmware

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook