Dir-816 A2 Firmware vulnerabilities

2 known vulnerabilities in Dir-816 A2 Firmware from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  dir-816_a2_firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-24331Feb 21, 2024D-LinkEPSS 2.12%

  Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter.

• 9.8 Critical severity

  DIR-816 A2: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-0921Jan 26, 2024D-LinkEPSS 37.6%

  A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statusch