D-Link DIR-816L any version

D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

D-Link DIR-816L soap.cgi soapcgi_main os command injection

D-Link DIR-816L gena.cgi genacgi_main stack-based overflow

D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow

D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow

D-Link DIR-816L Environment Variable cgibin lxmldbc_system command injection

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.