Dlink Dir-859 A3 Firmware vulnerabilities

CVE-2024-57045 [CRITICAL] CWE-287 CVE-2024-57045: A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unaut A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page.

CVE-2022-25106 [MEDIUM] CWE-787 CVE-2022-25106: D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacg D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

CVE-2019-17508 [CRITICAL] CWE-78 CVE-2019-17508: On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command in On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.