dir-878 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-878/ Sun, 26 Feb 2023 06:37:55 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dir-878 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-878/ 32 32 CVE-2020-15633 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-15633/ Sun, 26 Feb 2023 06:37:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-15633/ This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP requests. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage […]

The post CVE-2020-15633 appeared first on CVE Vulnerability.

]]> This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP requests. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the router. Was ZDI-CAN-10835.

The post CVE-2020-15633 appeared first on CVE Vulnerability.

]]> CVE-2019-9124 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9124/ Sun, 26 Feb 2023 06:34:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9124/ An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.

The post CVE-2019-9124 appeared first on CVE Vulnerability.

]]> An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.

The post CVE-2019-9124 appeared first on CVE Vulnerability.

]]> CVE-2019-9125 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9125/ Sun, 26 Feb 2023 06:34:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9125/ An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.

The post CVE-2019-9125 appeared first on CVE Vulnerability.

]]> An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.

The post CVE-2019-9125 appeared first on CVE Vulnerability.

]]>