Browse CVEs

MEDIUM 6.8 CVE-2024-36755 D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow att… Dir 1950 Firmware after 1.11b03 Fix from $1,6002024-06-27 HIGH 8.8 CVE-2024-37630 D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root. Dir 605l Firmware No fix yet Fix from $1,9502024-06-13 MEDIUM 5.7 CVE-2023-30309 An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service. Di 7003g Firmware No fix yet Fix from $1,6002024-05-28 HIGH 8.8 CVE-2024-5298 D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers… D View 8 Mitigation only Fix from $1,9502024-05-23 HIGH 8.8 CVE-2024-5299 D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… D View 8 Mitigation only Fix from $1,9502024-05-23 CRITICAL 9.8 CVE-2024-5296 D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentic… D View 8 Mitigation only Fix from $2,3002024-05-23 HIGH 8.8 CVE-2024-5293 D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to… Dir 2640 Firmware Mitigation only Fix from $1,9502024-05-23 HIGH 8.8 CVE-2024-5295 D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… G416 Firmware 1.09b01+ Fix from $1,9502024-05-23 HIGH 8.8 CVE-2024-5297 D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… D View 8 No fix yet Fix from $1,9502024-05-23 MEDIUM 6.5 CVE-2024-5294 D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to cre… Dir 3040 Firmware Mitigation only Fix from $1,6002024-05-23 HIGH 8.8 CVE-2024-5291 D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers … Dir 2150 Firmware Mitigation only Fix from $1,9502024-05-23 HIGH 7.8 CVE-2024-5292 D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to esca… Network Assistant after 4.0.0.21 Fix from $1,9502024-05-23 CRITICAL 9.8 CVE-2024-4965 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unkn… Dar 7000 Firmware Mitigation only Fix from $2,3002024-05-16 CRITICAL 9.8 CVE-2024-4964 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affe… Dar 7000 Firmware Mitigation only Fix from $2,3002024-05-16 CRITICAL 9.8 CVE-2024-4963 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unkn… Dar 7000 Firmware Mitigation only Fix from $2,3002024-05-16 CRITICAL 9.8 CVE-2024-4962 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by thi… Dar 7000 Firmware Mitigation only Fix from $2,3002024-05-16 CRITICAL 9.8 CVE-2024-4961 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability i… Dar 7000 Firmware Mitigation only Fix from $2,3002024-05-16 CRITICAL 9.8 CVE-2024-4960 ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown func… Dar 7000 Firmware Mitigation only Fix from $2,3002024-05-16 HIGH 7.5 CVE-2024-34950EPSS 5% D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module. Dir 822\+ Firmware No fix yet Fix from $1,9502024-05-14 CRITICAL 9.8 CVE-2024-4699EPSS 6% ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue af… Dar 8000 10 Firmware after 20230922 Fix from $2,3002024-05-14 MEDIUM 6.5 CVE-2024-33771 A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial… Dir 619l Firmware No fix yet Fix from $1,6002024-05-14 MEDIUM 6.5 CVE-2024-33773 A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a den… Dir 619l Firmware No fix yet Fix from $1,6002024-05-14 MEDIUM 6.5 CVE-2024-33774 A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a d… Dir 619l Firmware No fix yet Fix from $1,6002024-05-14 MEDIUM 5.7 CVE-2024-33772 A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial … Dir 619l Firmware No fix yet Fix from $1,6002024-05-14 HIGH 8.8 CVE-2023-35749 D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adja… Dap 2622 Firmware Mitigation only Fix from $1,9502024-05-07 HIGH 8.8 CVE-2023-35757 D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjac… Dap 2622 Firmware 1.10b03r022+ Fix from $1,9502024-05-07 MEDIUM 5.4 CVE-2023-37325 D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized cha… Dap 2622 Firmware Mitigation only Fix from $1,6002024-05-07 HIGH 8.8 CVE-2023-35748 D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows n… Dap 2622 Firmware Mitigation only Fix from $1,9502024-05-07 CRITICAL 9.1 CVE-2024-33110 D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component. Dir 845l Firmware after 1.01krb03 Fix from $2,3002024-05-06 HIGH 7.5 CVE-2024-33112EPSS 6% D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func. Dir 845l Firmware after 1.01krb03 Fix from $1,9502024-05-06