dir-816l_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-816l_firmware/ Sun, 26 Feb 2023 06:38:01 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dir-816l_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-816l_firmware/ 32 32 CVE-2020-15893 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-15893/ Sun, 26 Feb 2023 06:38:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-15893/ An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.

The post CVE-2020-15893 appeared first on CVE Vulnerability.

]]> An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.

The post CVE-2020-15893 appeared first on CVE Vulnerability.

]]> CVE-2020-15894 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-15894/ Sun, 26 Feb 2023 06:38:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-15894/ An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an attacker to retrieve various sensitive information, such as admin login credentials, by setting the value of _POST_SERVICES in the query string to […]

The post CVE-2020-15894 appeared first on CVE Vulnerability.

]]> An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an attacker to retrieve various sensitive information, such as admin login credentials, by setting the value of _POST_SERVICES in the query string to DEVICE.ACCOUNT.

The post CVE-2020-15894 appeared first on CVE Vulnerability.

]]> CVE-2020-15895 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-15895/ Sun, 26 Feb 2023 06:38:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-15895/ An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter, before it’s printed on the webpage.

The post CVE-2020-15895 appeared first on CVE Vulnerability.

]]> An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter, before it’s printed on the webpage.

The post CVE-2020-15895 appeared first on CVE Vulnerability.

]]> CVE-2022-28955 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-28955/ Thu, 23 Feb 2023 05:18:21 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-28955/ An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

The post CVE-2022-28955 appeared first on CVE Vulnerability.

]]> An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

The post CVE-2022-28955 appeared first on CVE Vulnerability.

]]> CVE-2022-28956 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-28956/ Thu, 23 Feb 2023 05:18:21 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-28956/ An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

The post CVE-2022-28956 appeared first on CVE Vulnerability.

]]> An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

The post CVE-2022-28956 appeared first on CVE Vulnerability.

]]> CVE-2022-28958 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-28958/ Thu, 23 Feb 2023 05:18:21 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-28958/ ** DISPUTED ** D-Link DIR816L_FW206b01 was discovered to contain a remote code execution (RCE) vulnerability via the value parameter at shareport.php. NOTE: this has been disputed by a third party.

The post CVE-2022-28958 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** D-Link DIR816L_FW206b01 was discovered to contain a remote code execution (RCE) vulnerability via the value parameter at shareport.php. NOTE: this has been disputed by a third party.

The post CVE-2022-28958 appeared first on CVE Vulnerability.

]]>