d-link vulnerabilities and exploits

(subscribe to this query)

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

D-link G403 D-link G415 D-link G416 D-link M18 D-link R03 D-link R04 D-link R12 D-link R18 D-link E30 D-link M30 D-link M32 D-link M60

D-Link DNS-320L firmware prior to 1.04b12, DNS-327L prior to 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote malicious users to bypass authentication and log in with administrator permissions by passing the...

D-link Dns-322l Firmware D-link Dns-325 Firmware D-link Dns-345 Firmware D-link Dns-320b Firmware D-link Dnr-326 Firmware D-link Dns-327l Firmware D-link Dns-320l Firmware

D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote malicious users to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or (2) if their request is the first, which causes /var/tmp/fw_ip to be creat...

D-link Dsl-502t D-link Dsl-504t D-link Dsl-562t D-link Dsl-g604t

Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW prior to 1.04b08, DNR-322L prior to 2.10 build 03, DNR-326 prior to 2.10 build 03, and DNS-327L prior to 1.04b01 allows remote malicious users to execute arbitrary code by crafting malformed &q...

D-link Dns-322l Firmware D-link Dns-320lw Firmware D-link Dnr-326 Firmware D-link Dns-327l Firmware D-link Dnr-320l Firmware

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 prior to 2.07WWB05, DIR-817 Ax, DIR-818LW Bx prior to 2.05b03beta03, DIR-822 C1 3.01 prior to 3.01WWb02, DIR-823 A1 1.00 prior to 1.00WWb05, DIR-895L A1 1.11 prior to 1.11WWb04, DIR-890L A1 1.09 prior to 1.09...

Dlink Dir-868l Firmware Dlink Dir-822 Firmware 3.01 D-link Dir-880l Firmware D-link Dir-850l Firmare D-link Dir-895l Firmware D-link Dir-817l(w) Firmware D-link Dir-818l(w) Firmware D-link Dir-890l Firmware D-link Dir-823 Firmware D-link Dir-885l Firmware

On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting (XSS) attack is possible as a result of missed filtration for special characters in the "Search" fiel...

D-link Dir-620 Firmware 1.0.3 D-link Dir-620 Firmware 1.0.37 D-link Dir-620 Firmware 1.3.1 D-link Dir-620 Firmware 1.3.3 D-link Dir-620 Firmware 1.3.7 D-link Dir-620 Firmware 1.4.0 D-link Dir-620 Firmware 2.0.22

In the web server on D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, there is a hardcoded password of anonymous for the admin account.

D-link Dir-620 Firmware 1.0.3 D-link Dir-620 Firmware 1.0.37 D-link Dir-620 Firmware 1.3.1 D-link Dir-620 Firmware 1.3.3 D-link Dir-620 Firmware 1.3.7 D-link Dir-620 Firmware 1.4.0 D-link Dir-620 Firmware 2.0.22

On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is possible as a result of incorrect processing of the res_buf parameter to index.cgi.

D-link Dir-620 Firmware 1.0.3 D-link Dir-620 Firmware 1.0.37 D-link Dir-620 Firmware 1.3.1 D-link Dir-620 Firmware 1.3.3 D-link Dir-620 Firmware 1.3.7 D-link Dir-620 Firmware 1.4.0 D-link Dir-620 Firmware 2.0.22

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote malicious users to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.

D-link Dph-540 1.00.03 D-link Dph-540 1.00.14 D-link Dph-541 1.00.03 D-link Dph-541 1.00.14

The D-Link DPH-540/DPH-541 phone allows remote malicious users to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.

D-link Dph-540 1.00.03 D-link Dph-540 1.00.14 D-link Dph-541 1.00.03 D-link Dph-541 1.00.14

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook