Browse CVEs

HIGH 10.0 CVE-2013-6026EPSS 8% The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-… Di 524up Mitigation only Fix from $1,9502013-10-19 MEDIUM 6.3 CVE-2013-4707 The SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows remote authenticated users to cause a denial of service… Des 3810 Firmware Mitigation only Fix from $1,6002013-09-20 MEDIUM 6.8 CVE-2012-1308 Cross-site request forgery (CSRF) vulnerability in redpass.cgi in D-Link DSL-2640B Firmware EU_4.00 allows remote attackers to hijack the authenticat… Dsl 2640b Firmware No fix yet Fix from $1,6002012-10-08 MEDIUM 6.8 CVE-2012-5319 Cross-site request forgery (CSRF) vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the… Dcs 2000 No fix yet Fix from $1,6002012-10-08 HIGH 9.3 CVE-2012-5306EPSS 12% Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5605 PTZ I… Camera Stream Client Activex Control No fix yet Fix from $1,9502012-10-06 MEDIUM 5.7 CVE-2011-4723 KEV The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vector… Dir 300 Firmware Mitigation only Fix from $1,6002011-12-20 HIGH 7.5 CVE-2011-4507EPSS 6% The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a la… Dir 685 Mitigation only Fix from $1,9502011-11-22 HIGH 9.0 CVE-2010-4964 recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in … Dcs 2121 Firmware No fix yet Fix from $1,9502011-10-16 HIGH 9.0 CVE-2010-4965 /etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it eas… Dcs 2121 Firmware No fix yet Fix from $1,9502011-10-16 MEDIUM 5.0 CVE-2009-4821 The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to (1) change the… Dir 615 No fix yet Fix from $1,6002010-04-27 HIGH 9.3 CVE-2009-1740EPSS 6% Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitr… Mpeg4 Viewer Activex Control Mitigation only Fix from $1,9502009-05-20 HIGH 7.8 CVE-2008-1266 Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or poss… Di 524 Mitigation only Fix from $1,9502008-03-10 HIGH 7.5 CVE-2005-1827EPSS 20% D-Link DSL-504T allows remote attackers to bypass authentication and gain privileges, such as upgrade firmware, restart the router or restore a saved… Dsl 504t Firmware Mitigation only Fix from $1,9502005-05-26 HIGH 7.5 CVE-2005-1828 D-Link DSL-504T stores usernames and passwords in cleartext in the router configuration file, which allows remote attackers to obtain sensitive infor… Dsl 504t Firmware No fix yet Fix from $1,9502005-05-26 HIGH 7.5 CVE-2002-1810 D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, whi… Dwl 900ap\+ Firmware Mitigation only Fix from $1,9502002-12-31