D-Link DIR-816 vulnerabilities

A vulnerability was detected in D-Link DIR-816 version 1.10CNB05_R1B011D88210. The function portForward is affected; manipulation of the ip_address argument results in command injection. The attack can be initiated remotely, and the exploit is now public and may be used.

A security vulnerability was detected in D-Link DIR-816 version 1.10CNB05_R1B011D88210. The function sub_445E7C of the file /goform/singlePortForward is affected; manipulation of the ip_address argument leads to command injection. The attack can be launched remotely, and the exploit has been publicly disclosed and may be used.

A weakness has been identified in D-Link DIR-816 version 1.10CNB05_R1B011D88210. The function sub_445E7C of the file /goform/formDMZ.cgi is affected; this manipulation causes command injection. The attack can be initiated remotely, and the exploit has been made available to the public and could be used for attacks.