Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Dlink Dir-816 FirmwareD-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No …

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end.

First published (updated )
CVE-2022-37133

Dlink Dir-816 FirmwareIn D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /gofor…

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend.

First published (updated )
CVE-2022-37128

Dlink Dir-816 FirmwareOS Command Injection, Command Injection

Risk 86
Severity
9.8
OS Command Injection, Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In D-Link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability

First published (updated )
CVE-2022-37130

Dlink Dir-816 FirmwareCommand Injection

Risk 86
Severity
9.8
Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost.

First published (updated )
CVE-2022-37125

Dlink Dir-816 FirmwareOS Command Injection, Command Injection

Risk 79
Severity
8.8
OS Command Injection, Command Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem(&byte4836B0); will be executed, resulting in a command injection.

First published (updated )
CVE-2022-37129

Dlink Dir-816 FirmwareBuffer Overflow

Risk 86
Severity
9.8
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow.

First published (updated )
CVE-2022-37134

Dlink Dir-816 FirmwareOS Command Injection, Command Injection

Risk 79
Severity
8.8
OS Command Injection, Command Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.

First published (updated )
CVE-2022-37123

Dlink Dir-816 FirmwareIn D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setM…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In D-link DIR-816 A2v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC.

First published (updated )
CVE-2022-36619

Dlink Dir-816 FirmwareBuffer Overflow

Risk 43
Severity
7.5
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.

First published (updated )
CVE-2022-36620

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in …

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.

First published (updated )
CVE-2022-29327

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /go…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.

First published (updated )
CVE-2022-29323

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.

First published (updated )
CVE-2022-29324

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parame…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter.

First published (updated )
CVE-2022-29326

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter paramet…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter.

First published (updated )
CVE-2022-29325

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.

First published (updated )
CVE-2022-29322

Dlink Dir-816 FirmwareD-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /…

Risk 87
Severity
10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.

First published (updated )
CVE-2022-29321

Dlink Dir-816 FirmwareOS Command Injection, Command Injection

Risk 87
Severity
10
OS Command Injection, Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm.

First published (updated )
CVE-2022-28915

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203