Количество 3
Количество 3

CVE-2018-10746
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.
GHSA-xxc2-vvph-qprf
An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code.

BDU:2023-03066
Уязвимость файла /userfs/bin/tcapi компонента Diagnostics микропрограммного обеспечения маршрутизатора D-Link DSL-3782, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2018-10746 An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code. | CVSS3: 8.8 | 1% Низкий | больше 7 лет назад |
GHSA-xxc2-vvph-qprf An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory corruption. Furthermore, it is possible to redirect the flow of the program and execute arbitrary code. | CVSS3: 8.8 | 1% Низкий | около 3 лет назад | |
![]() | BDU:2023-03066 Уязвимость файла /userfs/bin/tcapi компонента Diagnostics микропрограммного обеспечения маршрутизатора D-Link DSL-3782, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | больше 7 лет назад |
Уязвимостей на страницу