cnvd-2017-01139

fkie_cve-2016-10182

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.

GHSA-h93q-jv2p-c5p2

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.

VAR-201701-0169

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters. D-LinkDWR-932B has an input validation vulnerability that allows remote attackers to exploit a vulnerability to submit a special request and execute arbitrary commands. Dlink DWR-932B is prone to the following security vulnerabilities: 1. An insecure default-password vulnerability 2. An authentication-bypass vulnerability 3. A security-bypass vulnerability 4. Multiple security weaknesses 5. An information-disclosure vulnerability 6. A command-injection vulnerability 7. Multiple directory-traversal vulnerabilities An attacker can exploit these issues to bypass certain security restrictions to perform unauthorized actions, bypass-authentication mechanism, gain access to potentially sensitive information, or execute arbitrary commands in the context of the affected device. This may lead to further attacks

Most recent entries from all

bdu:2017-02549

cnvd-2017-01139

fkie_cve-2016-10182

GHSA-h93q-jv2p-c5p2

gsd-2016-10182

VAR-201701-0169