Vulnerabilities for Dsl-3782 firmware (...) - CXSECURITY.COM

Vulnerabilities for 'Dsl-3782 firmware'

2018-05-23

CVE-2018-8898

CWE-287

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT_77616E6771696F6E67") allows unauthenticated attackers to perform arbitrary modification (read, write) to passwords and configurations meanwhile an administrator is logged into the web panel.

2018-05-04

CVE-2018-10750

CWE-119

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'staticGet <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

CVE-2018-10749

CWE-119

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'commit <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

CVE-2018-10748

CWE-119

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'show <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

CVE-2018-10747

CWE-119

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'unset <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

CVE-2018-10746

CWE-119

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

2018-05-03

CVE-2018-10713

CWE-119

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'read <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

2018-04-03

CVE-2018-8941

CWE-119

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /userfs/bin/tcapi.

>>> Vendor: D-link 231 Products

Dcs-900 internet camera

Dsa-3100 airspot gateway

Di-604 broadband router

Ebr-2310 ethernet broadband router

Wbr-1310 wireless g router

Wbr-2310 rangebooster g router

Mpeg4 shm audio control

Camera stream client activex control

Dcs-5605 ptz ip network camera

Dcs-932l camera

Dcs-932l camera firmware

Dsr-1000 firmware

Dsr-1000n firmware

Dsr-150 firmware

Dsr-150n firmware

Dsr-250 firmware

Dsr-250n firmware

Dsr-500 firmware

Dsr-500n firmware

Dap 2253 firmware

Dir-505l shareport mobile companion

Dir-826l wireless n600 cloud router

Dir-505l shareport mobile companion firmware

Dir-826l wireless n600 cloud router firmware

Dap 1150 firmware

Dap-1350 firmware

Dir505 shareport mobile companion

Dir505 shareport mobile companion firmware

Dir505l shareport mobile companion firmware

Dsp-w215 firmware

Dir-601 firmware

Dir-645 firmware

Dcs-2103 hd cube network camera

Dcs-2103 hd cube network camera firmware

Dir-655 firmware

Dir-600 firmware

Dap-1360 firmware

Dsl-2730b firmware

Dcs-931l firmware

Dap-1320 firmware

Dcs-932l firmware

See all Products for Vendor D-link

Copyright 2024, cxsecurity.com