Di 8400 Firmware
Monthly
A weakness has been identified in D-Link DI-8400 16.07.26A1. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Denial of service in D-Link DI-8400 router firmware 16.07.26A1 allows authenticated remote attackers with low privileges to crash the device's jhttpd service by sending a crafted request to the usb_paswd.asp endpoint with a malicious share_enable parameter, triggering a null pointer dereference. Public exploit code is available, but no active exploitation has been reported and EPSS probability is low (0.21%).
D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution (RCE) vulnerabilities in the msp_info_htm function via the flag and cmd parameters. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical.asp file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in D-Link DI-8400 16.07.26A1. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Denial of service in D-Link DI-8400 router firmware 16.07.26A1 allows authenticated remote attackers with low privileges to crash the device's jhttpd service by sending a crafted request to the usb_paswd.asp endpoint with a malicious share_enable parameter, triggering a null pointer dereference. Public exploit code is available, but no active exploitation has been reported and EPSS probability is low (0.21%).
D-LINK DI-8400 v16.07.26A1 was discovered to contain multiple remote command execution (RCE) vulnerabilities in the msp_info_htm function via the flag and cmd parameters. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was discovered in DI_8400-16.07.26A1, which has been classified as critical.asp file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.