dir-816_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-816_firmware/ Sun, 26 Feb 2023 06:28:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dir-816_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-816_firmware/ 32 32 CVE-2019-10042 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10042/ Sun, 26 Feb 2023 06:28:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10042/ The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication.

The post CVE-2019-10042 appeared first on CVE Vulnerability.

]]> The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication.

The post CVE-2019-10042 appeared first on CVE Vulnerability.

]]> CVE-2019-10041 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10041/ Sun, 26 Feb 2023 06:28:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10041/ The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication.

The post CVE-2019-10041 appeared first on CVE Vulnerability.

]]> The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication.

The post CVE-2019-10041 appeared first on CVE Vulnerability.

]]> CVE-2019-10040 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10040/ Sun, 26 Feb 2023 06:28:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10040/ The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication.

The post CVE-2019-10040 appeared first on CVE Vulnerability.

]]> The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication.

The post CVE-2019-10040 appeared first on CVE Vulnerability.

]]> CVE-2019-10039 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-10039/ Sun, 26 Feb 2023 06:28:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-10039/ The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication.

The post CVE-2019-10039 appeared first on CVE Vulnerability.

]]> The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication.

The post CVE-2019-10039 appeared first on CVE Vulnerability.

]]> CVE-2021-31326 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-31326/ Thu, 23 Feb 2023 14:09:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-31326/ D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi.

The post CVE-2021-31326 appeared first on CVE Vulnerability.

]]> D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi.

The post CVE-2021-31326 appeared first on CVE Vulnerability.

]]> CVE-2021-26810 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-26810/ Thu, 23 Feb 2023 14:08:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-26810/ D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser parameter.

The post CVE-2021-26810 appeared first on CVE Vulnerability.

]]> D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser parameter.

The post CVE-2021-26810 appeared first on CVE Vulnerability.

]]> CVE-2022-43003 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43003/ Thu, 23 Feb 2023 05:21:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43003/ D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.

The post CVE-2022-43003 appeared first on CVE Vulnerability.

]]> D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.

The post CVE-2022-43003 appeared first on CVE Vulnerability.

]]> CVE-2022-43002 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43002/ Thu, 23 Feb 2023 05:21:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43002/ D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.

The post CVE-2022-43002 appeared first on CVE Vulnerability.

]]> D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.

The post CVE-2022-43002 appeared first on CVE Vulnerability.

]]> CVE-2022-43001 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43001/ Thu, 23 Feb 2023 05:21:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43001/ D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.

The post CVE-2022-43001 appeared first on CVE Vulnerability.

]]> D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.

The post CVE-2022-43001 appeared first on CVE Vulnerability.

]]> CVE-2022-43000 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-43000/ Thu, 23 Feb 2023 05:21:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-43000/ D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.

The post CVE-2022-43000 appeared first on CVE Vulnerability.

]]> D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.

The post CVE-2022-43000 appeared first on CVE Vulnerability.

]]>