dir-868l_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-868l_firmware/ Sun, 26 Feb 2023 06:50:45 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dir-868l_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-868l_firmware/ 32 32 CVE-2018-6527 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6527/ Sun, 26 Feb 2023 06:50:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6527/ XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.

The post CVE-2018-6527 appeared first on CVE Vulnerability.

]]> XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.

The post CVE-2018-6527 appeared first on CVE Vulnerability.

]]> CVE-2018-6528 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6528/ Sun, 26 Feb 2023 06:50:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6528/ XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.

The post CVE-2018-6528 appeared first on CVE Vulnerability.

]]> XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.

The post CVE-2018-6528 appeared first on CVE Vulnerability.

]]> CVE-2018-6529 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-6529/ Sun, 26 Feb 2023 06:50:45 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-6529/ XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.

The post CVE-2018-6529 appeared first on CVE Vulnerability.

]]> XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.

The post CVE-2018-6529 appeared first on CVE Vulnerability.

]]> CVE-2018-10957 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10957/ Sun, 26 Feb 2023 06:45:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10957/ CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components.

The post CVE-2018-10957 appeared first on CVE Vulnerability.

]]> CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components.

The post CVE-2018-10957 appeared first on CVE Vulnerability.

]]> CVE-2020-29321 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-29321/ Sun, 26 Feb 2023 06:40:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-29321/ The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.

The post CVE-2020-29321 appeared first on CVE Vulnerability.

]]> The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.

The post CVE-2020-29321 appeared first on CVE Vulnerability.

]]> CVE-2019-7642 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7642/ Sun, 26 Feb 2023 06:34:19 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7642/ D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users’ DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).

The post CVE-2019-7642 appeared first on CVE Vulnerability.

]]> D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users’ DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).

The post CVE-2019-7642 appeared first on CVE Vulnerability.

]]>