Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2024-23625

Disclosure Date: January 26, 2024 (last updated February 01, 2024)
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Attacker Value
Unknown

CVE-2024-23624

Disclosure Date: January 26, 2024 (last updated February 01, 2024)
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Attacker Value
Unknown

CVE-2022-36588

Disclosure Date: September 08, 2022 (last updated February 24, 2025)
In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.
Attacker Value
Unknown

CVE-2019-12768

Disclosure Date: December 30, 2020 (last updated February 22, 2025)
An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.
Attacker Value
Unknown

CVE-2019-12767

Disclosure Date: March 21, 2020 (last updated February 21, 2025)
An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands.