Browse CVEs

CRITICAL 9.8 CVE-2022-44929 An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profil… Dvg G5402sp Firmware No fix yet Fix from $2,3002022-12-02 CRITICAL 9.8 CVE-2022-44928 D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function. Dvg G5402sp Firmware No fix yet Fix from $2,3002022-12-02 MEDIUM 5.3 CVE-2021-33259 Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query hi… Dir 868lw Firmware No fix yet Fix from $1,6002021-10-31 CRITICAL 9.8 CVE-2021-26709EPSS 40% D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take ove… Dsl 320b D1 No fix yet Fix from $2,3002021-04-07 CRITICAL 9.8 CVE-2019-6258 D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP prot… Dir 822 Firmware after 2.02krb06 Fix from $2,3002020-08-18 HIGH 8.8 CVE-2020-15633 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 route… Dir 867 Firmware after 1.20b10 Fix from $1,9502020-07-23 HIGH 7.5 CVE-2020-9544 An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-upd… Dsl 2640b Firmware No fix yet Fix from $1,9502020-03-05 HIGH 8.8 CVE-2013-6811 Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authenticat… Dsl6740u Firmware Mitigation only Fix from $1,9502019-11-22 MEDIUM 6.1 CVE-2019-17663 D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection. Dir 866l Firmware Mitigation only Fix from $1,6002019-10-16 CRITICAL 9.8 CVE-2018-19986EPSS 42% In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DI… Dir 818lw Firmware No fix yet Fix from $2,3002019-05-13 CRITICAL 9.8 CVE-2018-19987EPSS 13% D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-8… Dir 818lw Firmware No fix yet Fix from $2,3002019-05-13 CRITICAL 9.8 CVE-2018-19988EPSS 7% In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.… Dir 868l Firmware No fix yet Fix from $2,3002019-05-13 CRITICAL 9.8 CVE-2018-19989EPSS 6% In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev… Dir 822 Firmware No fix yet Fix from $2,3002019-05-13 CRITICAL 9.8 CVE-2018-19990EPSS 5% In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In th… Dir 822 Firmware No fix yet Fix from $2,3002019-05-13 CRITICAL 9.8 CVE-2018-19300EPSS 74% On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02,… Dap 1530 Firmware after 2.02 Fix from $2,3002019-04-11 CRITICAL 9.8 CVE-2019-9124 An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password. Dir 878 Firmware No fix yet Fix from $2,3002019-02-25 CRITICAL 9.8 CVE-2019-9125 An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does… Dir 878 Firmware No fix yet Fix from $2,3002019-02-25 CRITICAL 9.8 CVE-2019-7297EPSS 12% An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbit… Dir 823g Firmware after 1.02b03 Fix from $2,3002019-01-31 CRITICAL 9.8 CVE-2018-20389 D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4… Dcm 604 Firmware No fix yet Fix from $2,3002018-12-23 HIGH 7.5 CVE-2018-18441 D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, suc… Dcs 936l Firmware No fix yet Fix from $1,9502018-12-20 HIGH 7.5 CVE-2018-18442 D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the de… Dcs 825l Firmware No fix yet Fix from $1,9502018-12-20 CRITICAL 9.8 CVE-2018-20305 D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userco… Dir 816 A2 Firmware No fix yet Fix from $2,3002018-12-20 CRITICAL 9.8 CVE-2018-20056EPSS 7% An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. There is a stack-based buffer overflow allowin… Dir 619l Firmware No fix yet Fix from $2,3002018-12-11 HIGH 8.8 CVE-2018-20057EPSS 7% An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated … Dir 619l Firmware No fix yet Fix from $1,9502018-12-11 MEDIUM 6.1 CVE-2018-18636 XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter. Dsl 2640t Firmware No fix yet Fix from $1,6002018-10-24 CRITICAL 9.8 CVE-2018-14081 An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. Device passwords, such as the admin … Dir 809 A1 Firmware after 1.11 Fix from $2,3002018-10-09 HIGH 7.5 CVE-2018-14080 An issue was discovered on D-Link DIR-809 A1 through 1.09, A2 through 1.11, and Guest Zone through 1.09 devices. One can bypass authentication mechan… Dir 809 A1 Firmware after 1.11 Fix from $1,9502018-10-09 CRITICAL 9.8 CVE-2018-17881 On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin … Dir 823g Firmware No fix yet Fix from $2,3002018-10-03 HIGH 7.5 CVE-2018-17880 On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot. Dir 823g Firmware No fix yet Fix from $1,9502018-10-03 CRITICAL 9.8 CVE-2018-17786 On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, whic… Dir 823g Firmware No fix yet Fix from $2,3002018-10-02