Go-rt-ac750 Firmware (Dlink) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-04-11. Vendor: Dlink.
CVEs of Go-rt-ac750 Firmware
- CVE-2024-27683 - CVSS 9.8 (critical), 2024-04-11: D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger…
- CVE-2024-27684 - CVSS 6.1 (medium), 2024-03-04: A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750_A1_FW_v101b03 allows remote…
- CVE-2024-22853 - CVSS 9.8 (critical), 2024-02-06: D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a…
- CVE-2024-22852 - CVSS 9.8 (critical), 2024-02-06: D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to enable…
- CVE-2024-22916 - CVSS 9.8 (critical), 2024-01-16: In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.
- CVE-2023-48842 - CVSS 9.8 (critical), 2023-12-01: D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.
- CVE-2023-34800 - CVSS 9.8 (critical), 2023-06-15: D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.
- CVE-2023-26822 - CVSS 9.8 (critical), 2023-04-01: D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
- CVE-2022-37056 - CVSS 9.8 (critical), 2022-08-28: D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main,
- CVE-2022-37055 - CVSS 9.8 (critical), 2022-08-28: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
- CVE-2022-37057 - CVSS 9.8 (critical), 2022-08-28: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.
- CVE-2022-36526 - CVSS 7.5 (high), 2022-08-15: D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Authentication Bypass via function phpcgi_main in cgibin.
- CVE-2022-36525 - CVSS 9.8 (critical), 2022-08-15: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main.
- CVE-2022-36524 - CVSS 7.5 (high), 2022-08-15: D-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static Default Credentials via /etc/init0.d/S80telnetd.sh.
- CVE-2022-36523 - CVSS 9.8 (critical), 2022-08-15: D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.
