Browse CVEs

CRITICAL 9.8 CVE-2020-25368EPSS 9% A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to exe… Dir 823g Firmware Mitigation only Fix from $2,3002021-11-04 CRITICAL 9.1 CVE-2020-25366 An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspe… Dir 823g Firmware Mitigation only Fix from $2,3002021-11-04 CRITICAL 9.8 CVE-2020-25367EPSS 9% A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to exe… Dir 823g Firmware Mitigation only Fix from $2,3002021-11-04 HIGH 8.8 CVE-2021-34861 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authen… Dap 2020 Firmware after 1.01 Fix from $1,9502021-10-25 HIGH 8.8 CVE-2021-34862 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authen… Dap 2020 Firmware after 1.01 Fix from $1,9502021-10-25 HIGH 8.8 CVE-2021-34863 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authen… Dap 2020 Firmware after 1.01 Fix from $1,9502021-10-25 MEDIUM 6.5 CVE-2021-34860 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers… Dap 2020 Firmware after 1.01 Fix from $1,6002021-10-25 HIGH 7.5 CVE-2021-41753 A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauth… Dir X1560 Firmware after 1.11b04 Fix from $1,9502021-09-27 HIGH 7.5 CVE-2021-40655 KEVEPSS 87% An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a po… Dir 605l Firmware Mitigation only Fix from $1,9502021-09-24 MEDIUM 6.5 CVE-2021-40654 An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the /… Dir 615 Firmware No fix yet Fix from $1,6002021-09-24 HIGH 8.0 CVE-2021-41503 DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command int… Dcs 932l Firmware after 2.17 Fix from $1,9502021-09-24 HIGH 8.0 CVE-2021-41504 An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices comm… Dcs 932l Firmware after 2.17 Fix from $1,9502021-09-24 CRITICAL 9.8 CVE-2021-21913 An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request c… Dir 3040 Firmware No fix yet Fix from $2,3002021-09-23 MEDIUM 6.5 CVE-2021-40284 D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interfac… Dsl 3782 Firmware Patch available Fix from $1,6002021-09-09 CRITICAL 9.8 CVE-2021-39510EPSS 9% An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /gofor… Dir 816 Firmware No fix yet Fix from $2,3002021-08-24 CRITICAL 9.8 CVE-2021-39509EPSS 5% An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/f… Dir 816 Firmware No fix yet Fix from $2,3002021-08-24 CRITICAL 9.8 CVE-2021-39613 D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' fi… Dvg 3104ms Firmware No fix yet Fix from $2,3002021-08-23 CRITICAL 9.8 CVE-2021-39614 D-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the pla… Dvx 2000ms Firmware No fix yet Fix from $2,3002021-08-23 CRITICAL 9.8 CVE-2021-39615 D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in reco… Dsr 500n Firmware No fix yet Fix from $2,3002021-08-23 HIGH 7.8 CVE-2021-3708EPSS 25% D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local netwo… Dsl 2750u Firmware after 1.16 Fix from $1,9502021-08-16 MEDIUM 5.5 CVE-2021-3707 D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to unauthorized configuration modification. An unauthenticated attacker… Dsl 2750u Firmware after 1.16 Fix from $1,6002021-08-16 HIGH 7.5 CVE-2021-29294 Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the … Dsl 2740r Firmware Mitigation only Fix from $1,9502021-08-10 HIGH 7.5 CVE-2021-29295 Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/l… Dsp W215 Firmware Mitigation only Fix from $1,9502021-08-10 HIGH 7.5 CVE-2021-29296 Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerabilit… Dir 825 Firmware Mitigation only Fix from $1,9502021-08-10 HIGH 7.5 CVE-2021-28838 Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1… Dap 2310 Firmware 1.05rc027 / 1.10rc036+ Fix from $1,9502021-08-10 HIGH 7.5 CVE-2021-28839 Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 … Dap 2310 Firmware No fix yet Fix from $1,9502021-08-10 HIGH 7.5 CVE-2021-28840 Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 … Dap 2310 Firmware No fix yet Fix from $1,9502021-08-10 CRITICAL 9.8 CVE-2021-37388 A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver … Dir 615 Firmware No fix yet Fix from $2,3002021-08-06 CRITICAL 9.8 CVE-2021-21820 A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network reque… Dir 3040 Firmware No fix yet Fix from $2,3002021-07-16 HIGH 7.2 CVE-2021-21819 A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request ca… Dir 3040 Firmware No fix yet Fix from $1,9502021-07-16