dir-818lw_firmware vulnerabilities and exploits

(subscribe to this query)

An issue exists on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the IPAddress key.

Dlink Dir-818lw Firmware 2.05.b03 Dlink Dir-818lw Firmware 2.06b01

An issue exists on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.

Dlink Dir-818lw Firmware 2.05.b03 Dlink Dir-818lw Firmware 2.06b01

An issue exists on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings.

Dlink Dir-818lw Firmware 2.06

An issue exists on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings.

Dlink Dir-818lw Firmware 2.06

On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter. NOTE: this issue exists because of an incom...

Dlink Dir-818lw Firmware 2.05.b03 Dlink Dir-860l Firmware 2.03.b03

1 Github repository

In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSettings.php source code, the RemotePort parameter is saved in the $path_inf_wan1."...

D-link Dir-818lw Firmware 2.05.b03 D-link Dir-822 Firmware 202krb06

1 Github repository

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the...

D-link Dir-818lw Firmware 2.05.b03 D-link Dir-822 Firmware 202krb06 Dlink Dir-822 Firmware 3.10b06 D-link Dir-860l Firmware 2.03.b03 D-link Dir-868l Firmware 2.05b02 D-link Dir-880l Firmware 1.20b01 01 I3se D-link Dir-890l\\/r Firmware 1.21b02

2 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook