Skip to content
OpenAdvisories
Critical WID-SEC-2023-2991 20 CVEs

D-LINK G416 Router: Mehrere Schwachstellen

Published Nov 21, 2023 · Updated Dec 20, 2023 · Revision 2 · de-DE

Vendor: D-Link Product: Router Product: Router G416 < 1.09B01 Product: Router G416 <= 1.08b02

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen im D-LINK G416 Routern ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 20

  • High 8.8
    CVE-2023-50198

    D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability

    D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50199

    D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability

    D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50200

    D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

    D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50201

    D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

    D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50202

    D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50203

    D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50204

    D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to expl…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50205

    D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50206

    D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50207

    D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this v…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50208

    D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit thi…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50209

    D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to ex…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50210

    D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is no…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50211

    D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50213

    D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50214

    D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exp…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50215

    D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to expl…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50216

    D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exp…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50217

    D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulne…

    D-Link G416 Network devices
  • Medium 4.3
    CVE-2023-50212

    D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability

    D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not …

    D-Link G416 Network devices

Revision history

  1. #2

    Updates von D-LINK aufgenommen

  2. #1

    Initiale Fassung

References