Browse CVEs

HIGH 8.8 CVE-2017-8412EPSS 6% An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /var/www/video folder. It seem… Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 8.8 CVE-2017-8413EPSS 10% An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and lis… Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 8.8 CVE-2017-8416EPSS 12% An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which is called "dldps2121" and lis… Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 8.8 CVE-2017-8417 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device provide a username and passw… Dcs 1100 Firmware No fix yet Fix from $1,9502019-07-02 CRITICAL 9.8 CVE-2017-8410EPSS 6% An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections rece… Dcs 1100 Firmware No fix yet Fix from $2,3002019-07-02 HIGH 7.8 CVE-2017-8414 An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handles all the UPnP connections re… Dcs 1100 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 7.5 CVE-2017-8409 An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a username and password. However… Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 8.8 CVE-2017-8406 An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on who can access the webserver. … Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 7.5 CVE-2017-8405 An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles all the rtsp connections rece… Dcs 1100 Firmware No fix yet Fix from $1,9502019-07-02 CRITICAL 9.8 CVE-2017-8404EPSS 8% An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings re… Dcs 1130 Firmware No fix yet Fix from $2,3002019-07-02 HIGH 8.8 CVE-2017-8407 An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the administrative password for the we… Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 HIGH 8.8 CVE-2017-8411EPSS 6% An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings re… Dcs 1130 Firmware No fix yet Fix from $1,9502019-07-02 CRITICAL 9.8 CVE-2017-8408EPSS 5% An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB folder for the video clippings re… Dcs 1130 Firmware No fix yet Fix from $2,3002019-07-02 HIGH 8.8 CVE-2019-13128EPSS 8% An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 (exploitable with Authentication) via… Dir 823g Firmware No fix yet Fix from $1,9502019-07-01 HIGH 8.8 CVE-2019-12786 An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML in… Dir 818lw Firmware No fix yet Fix from $1,9502019-06-10 HIGH 8.8 CVE-2019-12787 An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML in… Dir 818lw Firmware No fix yet Fix from $1,9502019-06-10 HIGH 8.8 CVE-2018-17990 An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp allows a remote authenticated… Dsl 3782 Firmware No fix yet Fix from $1,9502019-04-01 MEDIUM 5.4 CVE-2018-17989 A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a … Dsl 3782 Firmware No fix yet Fix from $1,6002019-04-01 HIGH 7.5 CVE-2019-7642 D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS quer… Dir 817lw Firmware No fix yet Fix from $1,9502019-03-25 CRITICAL 9.8 CVE-2019-10039 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp a… Dir 816 Firmware No fix yet Fix from $2,3002019-03-25 CRITICAL 9.8 CVE-2019-10040 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp a… Dir 816 Firmware No fix yet Fix from $2,3002019-03-25 CRITICAL 9.8 CVE-2019-10041 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp a… Dir 816 Firmware No fix yet Fix from $2,3002019-03-25 HIGH 7.5 CVE-2019-10042 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp a… Dir 816 Firmware No fix yet Fix from $1,9502019-03-25 CRITICAL 9.8 CVE-2019-9123 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password. Dir 825 Rev.b Firmware No fix yet Fix from $2,3002019-02-25 HIGH 7.5 CVE-2019-9126 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml d… Dir 825 Rev.b Firmware No fix yet Fix from $1,9502019-02-25 HIGH 8.8 CVE-2019-9122EPSS 24% An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter … Dir 825 Rev.b Firmware No fix yet Fix from $1,9502019-02-25 HIGH 7.5 CVE-2019-8392 An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest… Dir 823g Firmware No fix yet Fix from $1,9502019-02-17 HIGH 8.8 CVE-2019-8312EPSS 7% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8313EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8314EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13