Insight8991/iot

Releases0

cve

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-46476 ↗	Jan 19, 2023Thursday, 19 January 2023, 23:15	9.8 CRITICAL	—
D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.
CVE-2022-46475 ↗	Jan 17, 2023Tuesday, 17 January 2023, 21:15	9.8 CRITICAL	—
D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
CVE-2021-43722 ↗	Mar 31, 2022Thursday, 31 March 2022, 21:15	9.8 CRITICAL	7.5 HIGH
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size.