Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2018-17787

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function.

CVSS 3.0 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
D-link Dlink
Products
Dir-823g Firmware Dir-823g
CVE-2018-17786

On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
D-link Dlink
Products
Dir-823g Firmware Dir-823g
CVE-2024-44408

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
D-link Dlink
Products
Dir-823g Dir-823g Dir-823g Firmware