Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dlink dir-823g firmware 1.02b03 vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2019-13128
An issue exists on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings.
Dlink Dir-823g Firmware 1.02b03
7.5
CVSSv3
CVE-2019-7389
An issue exists in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote malicious users to reset the router without authentication via the SetFactoryDefault HNAP API. Consequently, an attacker can achieve a denial-of...
Dlink Dir-823g Firmware 1.02b03
8.6
CVSSv3
CVE-2019-7390
An issue exists in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to hijack the DNS service configuration of all clients in the WLAN, without authentication, via the SetWanSettings HNAP API.
Dlink Dir-823g Firmware 1.02b03
7.5
CVSSv3
CVE-2019-7388
An issue exists in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to get sensitive information (such as MAC address) about all clients in the WLAN via the GetClientInfo HNAP API. Consequently, an at...
Dlink Dir-823g Firmware 1.02b03
9.8
CVSSv3
CVE-2022-44808
A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an malicious user to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the ...
Dlink Dir-823g Firmware 1.02b03
7.5
CVSSv3
CVE-2019-8392
An issue exists on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote malicious users to enable Guest Wi-Fi via the SetWLanRadioSettings HNAP API to the web service provided by /bin/goahead.
Dlink Dir-823g Firmware 1.02b03
8.1
CVSSv3
CVE-2019-7298
An issue exists on D-Link DIR-823G devices with firmware up to and including 1.02B03. A command Injection vulnerability allows malicious users to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system funct...
Dlink Dir-823g Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started