Vulnerability index

Browse CVEs

1,663 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dir 820l Firmware CRITICAL 9.8
CVE-2023-25279EPSS 31%

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.

No fix yet
Fix from $2,300 2023-03-13
Dir 867 Firmware CRITICAL 9.8
CVE-2023-24762

OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress pa…

Mitigation only
Fix from $2,300 2023-03-13
Dir 820l Firmware HIGH 7.5
CVE-2023-25283

A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parame…

No fix yet
Fix from $1,950 2023-03-13
Dwl 2600ap Firmware HIGH 7.8
CVE-2023-0127

A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an authenticated attacker to ex…

No fix yet
Fix from $1,950 2023-02-11
Dir 605l Firmware CRITICAL 9.8
CVE-2023-24348

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.

No fix yet
Fix from $2,300 2023-02-10
Dir 605l Firmware CRITICAL 9.8
CVE-2023-24349

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute.

No fix yet
Fix from $2,300 2023-02-10
Dir 605l Firmware CRITICAL 9.8
CVE-2023-24350

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject parameter at /goform/formSetE…

No fix yet
Fix from $2,300 2023-02-10
Dir 605l Firmware CRITICAL 9.8
CVE-2023-24351

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin.

No fix yet
Fix from $2,300 2023-02-10
Dir 605l Firmware CRITICAL 9.8
CVE-2023-24352

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWPS.

No fix yet
Fix from $2,300 2023-02-10
Dir 605l Firmware HIGH 8.8
CVE-2023-24346

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at /goform/formEasySetupWizard3.

No fix yet
Fix from $1,950 2023-02-10
Dir 605l Firmware HIGH 8.8
CVE-2023-24347

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus.

No fix yet
Fix from $1,950 2023-02-10
Dir 605l Firmware HIGH 8.8
CVE-2023-24343

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule.

No fix yet
Fix from $1,950 2023-02-10
Dir 605l Firmware HIGH 8.8
CVE-2023-24344

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetup.

No fix yet
Fix from $1,950 2023-02-10
Dir 605l Firmware HIGH 8.8
CVE-2023-24345

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplus.

No fix yet
Fix from $1,950 2023-02-10
Dir 846 Firmware HIGH 8.8
CVE-2022-46552EPSS 11%

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist paramete…

No fix yet
Fix from $1,950 2023-02-02
Dir 825 Firmware CRITICAL 9.8
CVE-2022-47035

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method…

Fix: after 1.33.0.44ebdd4-embedded
Fix from $2,300 2023-01-31
Dir 878 Firmware CRITICAL 9.8
CVE-2022-48107

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This vulnerabil…

No fix yet
Fix from $2,300 2023-01-27
Dir 878 Firmware CRITICAL 9.8
CVE-2022-48108

D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerabi…

No fix yet
Fix from $2,300 2023-01-27
Dir 2150 Firmware HIGH 8.8
CVE-2022-40717

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not requi…

Fix: after 4.0.1
Fix from $1,950 2023-01-26
Dir 2150 Firmware HIGH 8.8
CVE-2022-40718

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. Authentication is not requi…

Fix: after 4.0.1
Fix from $1,950 2023-01-26
Dir 2150 Firmware HIGH 8.8
CVE-2022-40719

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authen…

Fix: after 4.0.1
Fix from $1,950 2023-01-26
Dir 2150 Firmware HIGH 8.8
CVE-2022-40720

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authen…

Fix: after 4.0.1
Fix from $1,950 2023-01-26
Dir 882 Us Firmware HIGH 8.8
CVE-2022-41140

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication i…

Fix: after 1.30b08
Fix from $1,950 2023-01-26
Dir 859 A1 Firmware CRITICAL 9.8
CVE-2022-46476EPSS 41%

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.

No fix yet
Fix from $2,300 2023-01-19
Dir 645 Firmware CRITICAL 9.8
CVE-2022-46475EPSS 10%

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.

No fix yet
Fix from $2,300 2023-01-17
Dir 882 A1 Firmware HIGH 7.2
CVE-2022-46560

D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Setti…

Mitigation only
Fix from $1,950 2022-12-23
Dir 882 A1 Firmware HIGH 7.2
CVE-2022-46561

D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettin…

Mitigation only
Fix from $1,950 2022-12-23
Dir 882 A1 Firmware HIGH 7.2
CVE-2022-46562

D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettin…

Mitigation only
Fix from $1,950 2022-12-23
Dir 882 A1 Firmware HIGH 7.2
CVE-2022-46563

D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDN…

Mitigation only
Fix from $1,950 2022-12-23
Dir 882 A1 Firmware HIGH 7.2
CVE-2022-46566

D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNS…

Mitigation only
Fix from $1,950 2022-12-23