GCVE - cpe:2.3:a:dlink:g416_firmware:1.08b02:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dlink:g416_firmware:1.08b02:*:*:*:*:*:*:*

part: a version: 1.08b02 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	G416 Firmware (`66266eb1-1ff8-5b33-8736-958617d6b8ea`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50217`	vulnerable	2026-06-08 06:16:15.677370	D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability HIGH (8.8) D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21811. Published: 2024-05-03T02:14:37.609Z Updated: 2024-08-02T22:09:49.709Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1833/ https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50214`	vulnerable	2026-06-08 06:16:15.675608	D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability HIGH (8.8) D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21808. Published: 2024-05-03T02:14:35.236Z Updated: 2024-08-02T22:09:49.766Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1830/ https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50213`	vulnerable	2026-06-08 06:16:15.674769	D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability HIGH (8.8) D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21807. Published: 2024-05-03T02:14:34.344Z Updated: 2024-08-02T22:09:49.838Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1829/ https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50211`	vulnerable	2026-06-08 06:16:15.673633	D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability HIGH (8.8) D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21663. Published: 2024-05-03T02:14:32.659Z Updated: 2024-08-02T22:09:50.001Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1827/ https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50210`	vulnerable	2026-06-08 06:16:15.672959	D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability HIGH (8.8) D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21662. Published: 2024-05-03T02:14:31.937Z Updated: 2024-08-02T22:09:50.019Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-23-1826/ https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10367	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50209`	vulnerable	2026-06-08 06:16:15.672406	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50208`	vulnerable	2026-06-08 06:16:15.671985	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50207`	vulnerable	2026-06-08 06:16:15.671385	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50206`	vulnerable	2026-06-08 06:16:15.670864	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50205`	vulnerable	2026-06-08 06:16:15.670399	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50204`	vulnerable	2026-06-08 06:16:15.669573	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50201`	vulnerable	2026-06-08 06:16:15.668090	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50199`	vulnerable	2026-06-08 06:16:15.664899	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.