Dlink

Dir-868l Firmware

18 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2019-7642

Exploit
  • EPSS 10.87%
  • Published 25.03.2019 22:29:00
  • Last modified 21.11.2024 04:48:27

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions...

10

CVE-2016-6563

Exploit
  • EPSS 87.97%
  • Published 13.07.2018 20:29:01
  • Last modified 21.11.2024 02:56:21

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following...

8.8

CVE-2018-10957

Exploit
  • EPSS 0.45%
  • Published 10.05.2018 02:29:00
  • Last modified 21.11.2024 03:42:23

CSRF exists on D-Link DIR-868L devices, leading to (for example) a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components.

10

CVE-2018-6530

Warning Exploit
  • EPSS 93.89%
  • Published 06.03.2018 20:29:00
  • Last modified 03.04.2025 20:28:21

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 an...

6.1

CVE-2018-6529

Exploit
  • EPSS 0.63%
  • Published 06.03.2018 20:29:00
  • Last modified 21.11.2024 04:10:50

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows re...

6.1

CVE-2018-6528

Exploit
  • EPSS 0.63%
  • Published 06.03.2018 20:29:00
  • Last modified 21.11.2024 04:10:50

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows r...

6.1

CVE-2018-6527

Exploit
  • EPSS 0.63%
  • Published 06.03.2018 20:29:00
  • Last modified 21.11.2024 04:10:50

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions all...

9.8

CVE-2016-5681

  • EPSS 20.76%
  • Published 25.08.2016 21:59:04
  • Last modified 12.04.2025 10:46:40

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A...