Dcs-935l Firmware vulnerabilities
4 known vulnerabilities in Dcs-935l Firmware from D-Link. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
DCS-935L: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in D-Link DCS-935L 1.10.01. This affects the function sub_400E40 of the file setconf.cgi of the component POST Parameter Handler. Such manipulation of the argument UID leads to os command injection. The attack can be launched rem
- 8.8 High severity
DCS-935L: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be
- 8.8 High severity
DCS-935L: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnap_service of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overfl
- 9.8 Critical severity
DCS-935L: Out-of-bounds Write
A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely.