Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-816_a2_firmware:1.10_b05:*:*:*:*:*:*:*

part: o version: 1.10_b05 update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 816 A2 Firmware (bd5fc46e-12e3-53c2-a0bc-07757f695dc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17068 vulnerable 2026-06-08 05:11:05.904915 Details available
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead to command injection via shell metacharacters in the sendNum parameter.
Published: 2018-09-15T21:00:00.000Z
Updated: 2024-08-05T10:39:59.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17067 vulnerable 2026-06-08 05:11:05.904417 Details available
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address.
Published: 2018-09-15T21:00:00.000Z
Updated: 2024-08-05T10:39:59.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17066 vulnerable 2026-06-08 05:11:05.903864 Details available
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter.
Published: 2018-09-15T21:00:00.000Z
Updated: 2024-08-05T10:39:59.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17065 vulnerable 2026-06-08 05:11:05.903426 Details available
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite the return address.
Published: 2018-09-15T21:00:00.000Z
Updated: 2024-08-05T10:39:59.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17064 vulnerable 2026-06-08 05:11:05.903069 Details available
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command injection via the syslogIp parameter after /goform/clearlog is invoked.
Published: 2018-09-15T21:00:00.000Z
Updated: 2024-08-05T10:39:59.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17063 vulnerable 2026-06-08 05:11:05.901705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.