D-Link dir-823x Firmware

D-Link DIR-823X set_wifidog_settings sub_412E7C command injection

D-Link DIR-823X set_static_leases sub_415028 command injection

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (RCE) vulnerability in the ntp_zone_val parameter at /goform/set_ntp. This vulnerability is exploited via a crafted HTTP request.

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41737c

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the target_addr key value and the function 0x41710c

D-Link DIR-823x diag_ping command injection

D-Link DIR-823X Environment Variable goahead sub_412E7C command injection

D-Link DIR-823X goahead command injection

D-Link DIR-823X set_device_name command injection

D-Link DIR-823X set_wifi_blacklists uci_set command injection

D-Link DIR-823X delete_prohibiting uci_del command injection

D-Link DIR-823X set_wifi_blacklists command injection

D-Link DIR-823X diag_traceroute command injection

D-Link DIR-823X delete_offline_device command injection

D-Link DIR-823X set_switch_settings sub_412E7C command injection

D-Link DIR-823X set_mode sub_41E2A0 os command injection

An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as the http_casswd parameter is not filtered by '&'to allow injection of reverse connection commands.

D-Link DIR-823X FUN_00412244 null pointer dereference

D-Link DIR-823X set_qos sub_420688 os command injection

D-Link DIR-823X set_ac_status os command injection

D-Link DIR-823X DDNS Service set_ddns os command injection

D-Link DIR-823X set_static_route_table sub_4175CC os command injection

D-Link DIR-823X Configuration Parameter set_server_settings os command injection

D-Link DIR-823X set_language os command injection

D-Link DIR-823X set_filtering sub_4211C8 os command injection

D-Link DIR-823X Configuration set_dmz sub_4208A0 os command injection

D-Link DIR-823X set_upnp sub_420618 os command injection

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.

D-Link DIR-823X set_password os command injection

D-Link DIR-823X set_mac_clone os command injection

D-Link DIR-823X Web Management set_ac_server os command injection

D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection

D-Link DIR-823X set_ipv6 sub_424D20 os command injection

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x41dda8

D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

D-Link DIR-823X set_wan_settings sub_415028 command injection

D-Link DIR-823X Login sub_40AC74 excessive authentication