Di-8100 Firmware vulnerabilities
20 known vulnerabilities in Di-8100 Firmware from D-Link. 20 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /user_group.asp of the component CGI Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management Interface. Executing a manipulation of the argument Name can lead to buffer overflow. The attack can be launched remote
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the component HTTP Request Handler. Performing a manipulation of the argument Name results in buffer overflow. The attack can be
- 9.8 Critical severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in D-Link DI-8100 16.07.26A1. Affected by this vulnerability is the function url_rule_asp of the file /url_rule.asp of the component POST Parameter Handler. Such manipulation leads to buffer overflow. It is possible t
- 9.8 Critical severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /auto_reboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attac
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is pub
- 9.4 Critical severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfile_htm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in D-Link DI-8100 16.07.26A1. Affected by this issue is the function file_exten_asp of the file file_exten.asp of the component File Extension Handler. The manipulation of the argument Name leads to buffer overflow. Remote exploi
- 7.5 High severity
Di-8100 Firmware: Buffer Copy without Checking Size of Input
D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_e
- 7.0 High severity
Di-8100 Firmware: Buffer Copy without Checking Size of Input
D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en`, `val and id parameters in the qj_asp function. This vulnerability allows authenticated attackers to cause a Denial of Service (DoS) by sending crafted GET requests with overly long values
- 9.8 Critical severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnp_ctrl.asp of the component jhttpd. The manipulation of the argument remove_ext_proto/remove_ext_port leads to stack-based b
- 8.8 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file /ddns.asp?opt=add of the component jhttpd. The manipulation of the argument mx leads to stack-based buffer ove
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. Affected is an unknown function of the file /jingx.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to l
- 7.2 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8100 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /arp_sys.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may
- 8.8 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoe_base.asp of the component jhttpd. The manipulation of the argument mschap_en leads to buffer overflow.
- 8.8 High severity
DI-8100: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DI-8100 up to 20250523. It has been classified as critical. Affected is the function httpd_get_parm of the file /login.cgi of the component jhttpd. The manipulation of the argument notify leads to stack-based buffer overflow
- 7.2 High severity
DI-8100: Out-of-bounds Write
A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_ud
- 8.8 High severity
DI-8100: Out-of-bounds Write
A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The a
- 9.8 Critical severity
DI-8100: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade_filter_asp of the file upgrade_filter.asp. The manipulation of the argument path leads to command injection. It is possible to initiate the
- 8.8 High severity
DI-8100: Improper Neutralization of Special Elements used in a Command
A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd leads to command injection. The attack may be initiated remot