Show filters
923 Total Results
Displaying 341-350 of 923
Sort by:
Attacker Value
Unknown
CVE-2022-40718
Disclosure Date: January 26, 2023 (last updated February 24, 2025)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15728.
0
Attacker Value
Unknown
CVE-2022-40717
Disclosure Date: January 26, 2023 (last updated February 24, 2025)
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15727.
0
Attacker Value
Unknown
CVE-2022-46476
Disclosure Date: January 19, 2023 (last updated February 24, 2025)
D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.
0
Attacker Value
Unknown
CVE-2022-46475
Disclosure Date: January 17, 2023 (last updated February 24, 2025)
D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
0
Attacker Value
Unknown
CVE-2022-46570
Disclosure Date: December 23, 2022 (last updated February 24, 2025)
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module.
0
Attacker Value
Unknown
CVE-2022-46569
Disclosure Date: December 23, 2022 (last updated February 24, 2025)
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module.
0
Attacker Value
Unknown
CVE-2022-46568
Disclosure Date: December 23, 2022 (last updated February 24, 2025)
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module.
0
Attacker Value
Unknown
CVE-2022-46566
Disclosure Date: December 23, 2022 (last updated February 24, 2025)
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module.
0
Attacker Value
Unknown
CVE-2022-46563
Disclosure Date: December 23, 2022 (last updated February 24, 2025)
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module.
0
Attacker Value
Unknown
CVE-2022-46562
Disclosure Date: December 23, 2022 (last updated February 24, 2025)
D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module.
0
