DIR-878 vulnerabilities
8 known vulnerabilities in DIR-878 from D-Link. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
DIR-878: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in D-Link DIR-878 1.20B05. Affected by this vulnerability is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument Primary/Secondary results in buffer overflow. The attack may be launche
- 7.5 High severity
DIR-878: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in D-Link DIR-878 1.20B05. Affected is the function SetWanSettings of the component HNAP Handler. The manipulation of the argument ConfigDNS/Primary/ConfigDNS/Secondary leads to buffer overflow. The attack may be initiated remote
- 7.5 High severity
DIR-878: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in D-Link DIR-878 1.20B05. This impacts the function SetVLANSettings of the file prog.cgi of the component HNAP Handler. Executing a manipulation of the argument VID can lead to stack-based buffer overflow. The attack can be laun
- 9.8 Critical severity
DIR-878: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of the component HNAP Handler. Performing a manipulation of the argument uid results in heap-based buffer overflow. The attack can be init
- 9.9 Critical severity
DIR-878: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.
- 9.9 Critical severity
DIR-878: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may
- 7.5 High severity
DIR-878: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the a
- 8.8 High severity
DIR-878: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service.