CVE-2019-7390

An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to hijack the DNS service configuration of all clients in the WLAN, without authentication, via the SetWanSettings HNAP API.

• CWE-306

• http://www.securityfocus.com/bid/106855Third Party Advisory
• https://github.com/leonW7/D-Link/blob/master/Vul_5.mdExploit, Third Party Advisory
• http://www.securityfocus.com/bid/106855Third Party Advisory
• https://github.com/leonW7/D-Link/blob/master/Vul_5.mdExploit, Third Party Advisory

Published

Feb 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7384An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7385An authenticated shell command injection issue has been disc…7.8
• CVE-2019-7386A Denial of Service issue has been discovered in the Gecko c…
• CVE-2019-7387A local file inclusion vulnerability exists in the web inter…
• CVE-2019-7388An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7389An issue was discovered in /bin/goahead on D-Link DIR-823G d…
• CVE-2019-7391ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/log…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…
• CVE-2019-7393A UI redress vulnerability in the administrative user interf…4.3
• CVE-2019-7394A privilege escalation vulnerability in the administrative u…8.8
• CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in Read…7.5