Dir-823g Firmware (D-link) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-01-31. Vendor: D-link.

CVEs of Dir-823g Firmware

• CVE-2019-7297 - CVSS 9.8 (critical), 2019-01-31: An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS…
• CVE-2018-17881 - CVSS 9.8 (critical), 2018-10-03: On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password…
• CVE-2018-17880 - CVSS 7.5 (high), 2018-10-03: On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot.
• CVE-2018-17787 - CVSS 9.8 (critical), 2018-10-02: On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent…
• CVE-2018-17786 - CVSS 9.8 (critical), 2018-10-02: On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows…