D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21235.
The D-Link DIR-600 router is affected by a cross-site request forgery (CSRF) vulnerability that enables attackers to change router configurations by hijacking an active administrator session. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
The D-Link DIR-605 router has an information disclosure vulnerability (CVE-2021-40655) that allows attackers to obtain a username and password by sending a forged POST request to the /getcfg.php page. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.
D-Link DSL-2750B devices have a command injection vulnerability that permits remote, unauthenticated attackers to execute arbitrary commands via the login.cgi cli parameter. This vulnerability is known to be exploited in the wild, posing a significant risk to affected devices.
CVE-2019-20500 is an authenticated command injection vulnerability in the D-Link DWL-2600AP access point. It occurs via the Save Configuration functionality in the web interface, where shell metacharacters can be injected through the admin.cgi?action=config_save configBackup or downloadServerip parameters. This vulnerability has been exploited in the wild.
The D-Link DIR-859 router has a command execution vulnerability in its UPnP service at the /gena.cgi endpoint. An unauthenticated remote attacker on the local network can exploit this flaw by sending a specially crafted HTTP SUBSCRIBE request, allowing execution of system commands with root privileges. This vulnerability has been exploited in the wild and is considered high severity.
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
The D-Link DIR-300 router has a vulnerability where it stores passwords in cleartext. This weakness allows attackers with certain access to retrieve sensitive password information. The issue is known to be exploited in the wild and is considered a high-severity security risk.
The D-Link DIR-820L router has a remote code execution vulnerability related to the Device Name parameter in the /lan.asp page. This vulnerability allows attackers to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information is provided.
Multiple D-Link routers are affected by an OS command injection vulnerability (CVE-2018-6530) that allows attackers to execute arbitrary operating system commands. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. Specific affected versions are not detailed in the available information.
The D-Link DNS-320 storage device contains a remote code execution vulnerability in the login_mgr.cgi script. This vulnerability allows attackers to execute arbitrary code remotely. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2021-45382 is a remote code execution vulnerability affecting multiple D-Link router models across all hardware revisions. The flaw exists in the DDNS function within the ncc2 binary file. This vulnerability has been exploited in the wild, posing a high risk to affected devices.
D-Link DIR-610 devices are vulnerable to remote code execution through the cmd parameter in command.php. This vulnerability allows attackers to execute arbitrary commands remotely on affected devices. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2013-5223 is a cross-site scripting (XSS) vulnerability in the D-Link DSL-2760U gateway that allows remote authenticated users to inject arbitrary web script or HTML. This vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.
Multiple D-Link routers have a command injection vulnerability (CVE-2019-16920) that allows attackers to execute arbitrary commands, potentially leading to full system compromise. This vulnerability has been exploited in the wild. No specific affected versions or patches are detailed in the provided data.
