D-Link dir-823x Firmware 240126

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (RCE) vulnerability in the ntp_zone_val parameter at /goform/set_ntp. This vulnerability is exploited via a crafted HTTP request.

D-Link DIR-823X Environment Variable goahead sub_412E7C command injection

D-Link DIR-823X goahead command injection

D-Link DIR-823X FUN_00412244 null pointer dereference

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.

D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection

D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference