D-Link DCS-932L Firmware 2.18.01
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dcs-932l_firmware:2.18.01:*:*:*:*:*:*:*
part: o version: 2.18.01 update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dcs 932L Firmware (05542b94-9932-5fc0-8da2-57f38306f832) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-36983 |
vulnerable | 2026-06-08 08:01:15.937889 |
Details available
D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection.
Published: 2026-05-11T00:00:00.000Z
Updated: 2026-05-12T14:34:05.858Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5573 |
vulnerable | 2026-06-08 07:37:25.195143 |
D-Link DCS-932L setSystemWizard setSystemControl os command injection
MEDIUM (6.3)
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemWizard. The manipulation of the argument AdminID leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-06-04T06:00:18.187Z
Updated: 2025-06-04T13:42:49.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5572 |
vulnerable | 2026-06-08 07:37:25.194483 |
D-Link DCS-932L setSystemEmail stack-based overflow
HIGH (8.8)
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-06-04T06:00:13.471Z
Updated: 2025-06-04T13:45:55.834Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5571 |
vulnerable | 2026-06-08 07:37:25.192702 |
D-Link DCS-932L setSystemAdmin os command injection
MEDIUM (6.3)
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-06-04T05:31:53.898Z
Updated: 2025-06-04T13:24:36.159Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4843 |
vulnerable | 2026-06-08 07:29:17.396986 |
D-Link DCS-932L udev SubUPnPCSInit stack-based overflow
HIGH (8.8)
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. This affects the function SubUPnPCSInit of the file /sbin/udev. The manipulation of the argument CameraName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-05-17T23:31:04.833Z
Updated: 2025-05-19T15:23:24.118Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4842 |
vulnerable | 2026-06-08 07:29:17.396293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4841 |
vulnerable | 2026-06-08 07:29:17.394754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37606 |
vulnerable | 2026-06-08 06:39:47.970767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.