Dwl 3600ap Firmware

dwl-3600ap_firmware

Vendor: Dlink • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-14335 1Dlink 26600 Ap Firmware Dwl 3600ap Firmware Nov 21, 2024 Aug 8, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the reboot of the AP via the admin.cgi?action=%s URI.
CVE-2019-14338 1Dlink 26600 Ap Firmware Dwl 3600ap Firmware Nov 21, 2024 Aug 1, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a post-authentication admin.cgi?action= XSS vulnerability on the management interface.
CVE-2019-14337 1Dlink 26600 Ap Firmware Dwl 3600ap Firmware Nov 21, 2024 Aug 1, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is an ability to escape to a shell in the restricted command line interface, as demonstrated by the `/bin/sh -c wget` sequenc...Show more An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is an ability to escape to a shell in the restricted command line interface, as demonstrated by the `/bin/sh -c wget` sequence.Show less
CVE-2019-14336 1Dlink 26600 Ap Firmware Dwl 3600ap Firmware Nov 21, 2024 Aug 1, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated dump of all of the config files through a certain admin.cgi?action= insecure HTTP request.
CVE-2019-14334 1Dlink 36600 Ap Firmware Dwl 3600ap FirmwareDwl 8610ap Firmware Nov 21, 2024 Aug 1, 2019 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP comman...Show more An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command.Show less
CVE-2019-14333 1Dlink 26600 Ap Firmware Dwl 3600ap Firmware Nov 21, 2024 Aug 1, 2019 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a pre-authenticated denial of service attack against the access point via a long action parameter to admin.cgi.
CVE-2019-14332 1Dlink 26600 Ap Firmware Dwl 3600ap Firmware Nov 21, 2024 Aug 1, 2019 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is use of weak ciphers for SSH such as diffie-hellman-group1-sha1.