Dnr 326 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:d-link:dnr-326_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | D Link (f324da99-07b9-589f-a800-1ce04a08f309) |
|---|---|
| Product | Dnr 326 Firmware (e0e956c4-a4c2-59e2-b4b3-cf3bc9e7c388) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-7859 |
vulnerable | 2026-06-08 05:06:00.292274 |
Details available
Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T13:03:27.420Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7858 |
vulnerable | 2026-06-08 05:06:00.289604 |
Details available
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T13:03:27.399Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7857 |
vulnerable | 2026-06-08 05:06:00.284496 |
Details available
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T13:03:27.574Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.