CVEInsight.

Free vulnerability intelligence for developers, security teams, and researchers. Data sourced from public databases for informational purposes only.

Explore

Legal

CVE data sourced from NVD / NIST & public disclosures.

d-link

dir-878_firmware

3 known vulnerabilities · sorted by CVSS score

CVE-2019-9125

CRITICAL9.8

An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.

d-link / dir-878_firmware

Network

Published Feb 25, 2019

CVE-2019-9124

CRITICAL9.8

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.

d-link / dir-878_firmware

Network

Published Feb 25, 2019

CVE-2020-15633

HIGH8.8

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.20B10_BETA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP requests. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the router. Was ZDI-CAN-10835.

d-link / dir-867_firmware+2

Adjacent

Published Jul 23, 2020