dlink dsr-1000ac firmware vulnerabilities and exploits

(subscribe to this query)

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmw...

Dlink Dsr-150 Firmware Dlink Dsr-150n Firmware Dlink Dsr-250 Firmware Dlink Dsr-250n Firmware Dlink Dsr-500 Firmware Dlink Dsr-500n Firmware Dlink Dsr-500ac Firmware Dlink Dsr-1000 Firmware Dlink Dsr-1000n Firmware Dlink Dsr-1000ac Firmware

An issue exists on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated malicious user to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.

Dlink Dsr-150 Firmware Dlink Dsr-150n Firmware Dlink Dsr-250 Firmware Dlink Dsr-250n Firmware Dlink Dsr-500 Firmware Dlink Dsr-500n Firmware Dlink Dsr-500ac Firmware Dlink Dsr-1000 Firmware Dlink Dsr-1000n Firmware Dlink Dsr-1000ac Firmware

An issue exists on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated malicious user to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.

Dlink Dsr-150 Firmware Dlink Dsr-150n Firmware Dlink Dsr-250 Firmware Dlink Dsr-250n Firmware Dlink Dsr-500 Firmware Dlink Dsr-500n Firmware Dlink Dsr-500ac Firmware Dlink Dsr-1000 Firmware Dlink Dsr-1000n Firmware Dlink Dsr-1000ac Firmware

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook