Approved changes feed: RSS · Atom

cpe:2.3:o:d-link:dsl-3782_firmware:1.01:*:*:*:*:*:*:*

part: o version: 1.01 update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDsl 3782 Firmware (ad2072a2-b436-5e80-abfa-3f24af6bbcba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8941 vulnerable 2026-06-08 05:12:06.732831 Details available
Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /userfs/bin/tcapi.
Published: 2018-04-03T23:00:00.000Z
Updated: 2024-08-05T07:10:47.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10750 vulnerable 2026-06-08 05:10:37.057147 Details available
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'staticGet <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Published: 2018-05-04T18:00:00.000Z
Updated: 2024-09-17T03:37:34.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10749 vulnerable 2026-06-08 05:10:37.056838 Details available
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'commit <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Published: 2018-05-04T18:00:00.000Z
Updated: 2024-09-16T19:52:01.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10748 vulnerable 2026-06-08 05:10:37.056420 Details available
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'show <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Published: 2018-05-04T18:00:00.000Z
Updated: 2024-09-16T22:21:02.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10747 vulnerable 2026-06-08 05:10:37.056109 Details available
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as an 'unset' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'unset <node_name>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
Published: 2018-05-04T18:00:00.000Z
Updated: 2024-09-16T17:09:05.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10746 vulnerable 2026-06-08 05:10:37.055783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10713 vulnerable 2026-06-08 05:10:36.968864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.