Browse CVEs

CRITICAL 9.8 CVE-2021-21820 A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network reque… Dir 3040 Firmware No fix yet Fix from $2,3002021-07-16 HIGH 7.2 CVE-2021-21819 A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request ca… Dir 3040 Firmware No fix yet Fix from $1,9502021-07-16 HIGH 7.5 CVE-2021-21817 An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network … Dir 3040 Firmware No fix yet Fix from $1,9502021-07-16 HIGH 7.5 CVE-2021-21818 A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network requ… Dir 3040 Firmware No fix yet Fix from $1,9502021-07-16 HIGH 8.8 CVE-2021-34827 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Aut… Dap 1330 Firmware Mitigation only Fix from $1,9502021-07-15 HIGH 8.8 CVE-2021-34828 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Aut… Dap 1330 Firmware Mitigation only Fix from $1,9502021-07-15 HIGH 8.8 CVE-2021-34829 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Aut… Dap 1330 Firmware Mitigation only Fix from $1,9502021-07-15 HIGH 8.8 CVE-2021-34830 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1330 1.13B01 BETA routers. Aut… Dap 1330 Firmware Mitigation only Fix from $1,9502021-07-15 CRITICAL 9.8 CVE-2021-33346 There is an arbitrary password modification vulnerability in a D-LINK DSL-2888A router product. An attacker can use this vulnerability to modify the … Dsl 2888a Firmware No fix yet Fix from $2,3002021-06-24 HIGH 8.1 CVE-2021-34203 D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, will start quagga process in t… Dir 2640 Us Firmware Mitigation only Fix from $1,9502021-06-16 HIGH 7.1 CVE-2021-34201 D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-… Dir 2640 Us Firmware No fix yet Fix from $1,9502021-06-16 MEDIUM 6.8 CVE-2021-34204 D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR-2640) stores the device system account password in … Dir 2640 Us Firmware No fix yet Fix from $1,6002021-06-16 HIGH 7.8 CVE-2021-34202 There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to admini… Dir 2640 Us Firmware No fix yet Fix from $1,9502021-06-16 HIGH 7.5 CVE-2020-29321 The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthent… Dir 868l Firmware No fix yet Fix from $1,9502021-06-04 HIGH 7.5 CVE-2020-29322 The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthent… Dir 880l Firmware No fix yet Fix from $1,9502021-06-04 HIGH 7.5 CVE-2020-29323 The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that al… Dir 885l Mfc Firmware No fix yet Fix from $1,9502021-06-04 HIGH 7.5 CVE-2020-29324 The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an un… Dir 895l Mfc Firmware No fix yet Fix from $1,9502021-06-04 CRITICAL 9.8 CVE-2021-27113 An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler fu… Dir 816 Firmware No fix yet Fix from $2,3002021-04-14 CRITICAL 9.8 CVE-2021-27114EPSS 25% An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry… Dir 816 Firmware No fix yet Fix from $2,3002021-04-14 CRITICAL 9.8 CVE-2020-27600EPSS 14% HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via s… Dir 846 Firmware No fix yet Fix from $2,3002021-04-02 CRITICAL 9.8 CVE-2021-26810 D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in… Dir 816 Firmware No fix yet Fix from $2,3002021-03-30 HIGH 8.8 CVE-2020-27862 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Au… Dva 2800 Firmware Mitigation only Fix from $1,9502021-02-12 MEDIUM 6.5 CVE-2020-27863 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A rou… Dva 2800 Firmware Mitigation only Fix from $1,6002021-02-12 CRITICAL 9.8 CVE-2020-18568EPSS 15% The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution. Dsr 250 Firmware No fix yet Fix from $2,3002021-02-02 CRITICAL 9.8 CVE-2020-25506 KEVEPSS 100% D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code exec… Dns 320 Firmware Mitigation only Fix from $2,3002021-02-02 HIGH 8.0 CVE-2021-3182 D-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Dcs 5220 Firmware No fix yet Fix from $1,9502021-01-19 HIGH 7.5 CVE-2020-24577EPSS 19% An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive informa… Dsl 2888a Firmware No fix yet Fix from $1,9502021-01-08 HIGH 8.8 CVE-2020-24579EPSS 10% An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass authenticati… Dsl2888a Firmware No fix yet Fix from $1,9502020-12-22 HIGH 8.0 CVE-2020-24581EPSS 14% An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not r… Dsl2888a Firmware No fix yet Fix from $1,9502020-12-22 HIGH 7.5 CVE-2020-24580 An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an attack… Dsl2888a Firmware No fix yet Fix from $1,9502020-12-22