GCVE - cpe:2.3:o:dlink:dir-878_firmware:1.12a1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-878_firmware:1.12a1:*:*:*:*:*:*:*

part: o version: 1.12a1 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 878 Firmware (`5933f53d-4089-56df-8b7f-fe8def97508a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-8319`	vulnerable	2026-06-08 05:14:23.830954	Details available An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteIPv4Settings API function, as demonstrated by shell metacharacters in the Gateway field. Published: 2019-02-13T03:00:00.000Z Updated: 2024-09-16T23:27:08.641Z Open on db.gcve.eu Reference links https://github.com/lieanu/vuls/blob/master/dlink/DIR-878/staticrouterv4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8318`	vulnerable	2026-06-08 05:14:23.830641	Details available An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the twsystem function with untrusted input from the request body for the SetSysEmailSettings API function, as demonstrated by shell metacharacters in the SMTPServerPort field. Published: 2019-02-13T03:00:00.000Z Updated: 2024-09-16T19:14:40.463Z Open on db.gcve.eu Reference links https://github.com/lieanu/vuls/blob/master/dlink/DIR-878/mail.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8317`	vulnerable	2026-06-08 05:14:23.830140	Details available An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetStaticRouteIPv6Settings API function, as demonstrated by shell metacharacters in the DestNetwork field. Published: 2019-02-13T03:00:00.000Z Updated: 2024-09-17T02:27:52.554Z Open on db.gcve.eu Reference links https://github.com/lieanu/vuls/blob/master/dlink/DIR-878/staticrouterv6.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8316`	vulnerable	2026-06-08 05:14:23.829660	Details available An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetWebFilterSettings API function, as demonstrated by shell metacharacters in the WebFilterURLs field. Published: 2019-02-13T03:00:00.000Z Updated: 2024-09-16T17:28:06.569Z Open on db.gcve.eu Reference links https://github.com/lieanu/vuls/blob/master/dlink/DIR-878/webfilter.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8315`	vulnerable	2026-06-08 05:14:23.829237	Details available An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the twsystem function with untrusted input from the request body for the SetIPv4FirewallSettings API function, as demonstrated by shell metacharacters in the SrcIPv4AddressRangeStart field. Published: 2019-02-13T03:00:00.000Z Updated: 2024-09-17T03:03:40.987Z Open on db.gcve.eu Reference links https://github.com/lieanu/vuls/blob/master/dlink/DIR-878/firewallv4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8314`	vulnerable	2026-06-08 05:14:23.828837	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8313`	vulnerable	2026-06-08 05:14:23.828489	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8312`	vulnerable	2026-06-08 05:14:23.827355	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.