Browse CVEs

CRITICAL 9.8 CVE-2023-43201 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_ext.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43202 D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vulnerabili… Dwl 6610ap Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43203 D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users. Dwl 6610ap Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43204 D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50. This vulnerability allows at… Dwl 6610ap Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43206 D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. This vulnera… Dwl 6610ap Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43207 D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vulnerabili… Dwl 6610ap Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43196 D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43197 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43198 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hi_block.asp function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-43199 D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function. Di 7200g Firmware No fix yet Fix from $2,3002023-09-20 CRITICAL 9.8 CVE-2023-39638 D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbc_system function at /htdocs/c… Dir 859 A1 Firmware No fix yet Fix from $2,3002023-09-14 CRITICAL 9.8 CVE-2023-39637 D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis. Dir 816 Firmware Mitigation only Fix from $2,3002023-09-12 CRITICAL 9.8 CVE-2020-19319 Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. Dir 619l Firmware No fix yet Fix from $2,3002023-09-11 CRITICAL 9.8 CVE-2020-19320 Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. Dir 619l Firmware No fix yet Fix from $2,3002023-09-11 HIGH 7.5 CVE-2020-19323 An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices. There is a heap buffer overflow allowing remote attackers to restart … Dir 619l Firmware No fix yet Fix from $1,9502023-09-11 HIGH 8.8 CVE-2020-19318 Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers execute arbit… Dir 605l Firmware after 1.17b01 Fix from $1,9502023-09-11 HIGH 8.1 CVE-2023-4711EPSS 6% A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functi… Dar 8000 10 Firmware after 20230819 Fix from $1,9502023-09-01 CRITICAL 9.8 CVE-2023-4542EPSS 88% A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys… Dar 8000 10 Firmware after 2023-08-09 Fix from $2,3002023-08-25 CRITICAL 9.8 CVE-2023-39749 D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /adv_resource. This vulnerability is exploited via a crafted GET … Dap 2660 Firmware No fix yet Fix from $2,3002023-08-21 CRITICAL 9.8 CVE-2023-39750EPSS 13% D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the f_ipv6_enable parameter at /bsc_ipv6. This vulnerability is exploited via a… Dap 2660 Firmware No fix yet Fix from $2,3002023-08-21 CRITICAL 9.8 CVE-2023-39674 D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function fgets. Dir 880l A1 Firmware Mitigation only Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-39671 D-Link DIR-880 A1_FW107WWb08 was discovered to contain a buffer overflow via the function FUN_0001be68. Dir 880l A1 Firmware No fix yet Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-39667 D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the FUN_0000acb4 function. Dir 868l Firmware Mitigation only Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-39668 D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the param_2 parameter in the inet_ntoa() function. Dir 868l Firmware Mitigation only Fix from $2,3002023-08-18 HIGH 7.5 CVE-2023-39669 D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. Dir 880l A1 Firmware Mitigation only Fix from $1,9502023-08-18 CRITICAL 9.8 CVE-2023-39665 D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter. Dir 868l Firmware Mitigation only Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-39666 D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_120 and acSta… Dir 842 Firmware Mitigation only Fix from $2,3002023-08-18 CRITICAL 9.8 CVE-2023-36089 Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_… Dir 645 Firmware Mitigation only Fix from $2,3002023-07-31 CRITICAL 9.8 CVE-2023-36090 Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerabi… Dir 885l Firmware Mitigation only Fix from $2,3002023-07-31 CRITICAL 9.8 CVE-2023-36091 Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in c… Dir 895l Firmware Mitigation only Fix from $2,3002023-07-31