Browse CVEs

CRITICAL 9.8 CVE-2019-16920 KEVEPSS 100% Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker… Dir 655 Firmware after 3.02b05 Fix from $2,3002019-09-27 CRITICAL 9.8 CVE-2019-16057 KEVEPSS 87% The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. Dns 320 Firmware after 2.05.b10 Fix from $2,3002019-09-16 CRITICAL 9.8 CVE-2019-16190 SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication B… Dir 868l Firmware after 2.03 Fix from $2,3002019-09-09 CRITICAL 9.8 CVE-2019-10891EPSS 19% An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the para… Dir 806 Firmware No fix yet Fix from $2,3002019-09-06 CRITICAL 9.8 CVE-2019-10892 An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will … Dir 806 Firmware No fix yet Fix from $2,3002019-09-06 HIGH 8.8 CVE-2019-13263 D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device… Dir 825\/ac G1 Firmware No fix yet Fix from $1,9502019-08-27 HIGH 8.8 CVE-2019-13264 D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device… Dir 825\/ac G1 Firmware No fix yet Fix from $1,9502019-08-27 HIGH 8.8 CVE-2019-13265 D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device… Dir 825\/ac G1 Firmware No fix yet Fix from $1,9502019-08-27 HIGH 8.8 CVE-2019-15526 An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) v… Dir 823g Firmware No fix yet Fix from $1,9502019-08-23 HIGH 8.8 CVE-2019-15527 An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) v… Dir 823g Firmware No fix yet Fix from $1,9502019-08-23 HIGH 8.8 CVE-2019-15528 An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) v… Dir 823g Firmware No fix yet Fix from $1,9502019-08-23 HIGH 8.8 CVE-2019-15529EPSS 8% An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) v… Dir 823g Firmware No fix yet Fix from $1,9502019-08-23 HIGH 8.8 CVE-2019-15530 An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 (exploitable with Authentication) v… Dir 823g Firmware No fix yet Fix from $1,9502019-08-23 MEDIUM 5.5 CVE-2019-14335 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated denial of service leading to the… 6600 Ap Firmware No fix yet Fix from $1,6002019-08-08 CRITICAL 9.8 CVE-2019-13101EPSS 67% An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lea… Dir 600m Firmware No fix yet Fix from $2,3002019-08-08 HIGH 7.5 CVE-2019-6969 The web interface of the D-Link DVA-5592 20180823 is vulnerable to an authentication bypass that allows an unauthenticated user to have access to sen… Dva 5592 Firmware No fix yet Fix from $1,9502019-08-02 MEDIUM 6.1 CVE-2019-6968 The web interface of the D-Link DVA-5592 20180823 is vulnerable to XSS because HTML form parameters are directly reflected. Dva 5592 Firmware No fix yet Fix from $1,6002019-08-02 MEDIUM 6.1 CVE-2019-14338 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a post-authentication admin.cgi?action= XSS vulnera… 6600 Ap Firmware No fix yet Fix from $1,6002019-08-01 MEDIUM 5.5 CVE-2019-14333 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is a pre-authenticated denial of service attack agains… 6600 Ap Firmware No fix yet Fix from $1,6002019-08-01 MEDIUM 5.5 CVE-2019-14334 An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA… 6600 Ap Firmware No fix yet Fix from $1,6002019-08-01 MEDIUM 5.5 CVE-2019-14336 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated dump of all of the config files … 6600 Ap Firmware No fix yet Fix from $1,6002019-08-01 MEDIUM 5.5 CVE-2019-14337 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is an ability to escape to a shell in the restricted c… 6600 Ap Firmware No fix yet Fix from $1,6002019-08-01 HIGH 7.8 CVE-2019-14332 An issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is use of weak ciphers for SSH such as diffie-hellman-… 6600 Ap Firmware No fix yet Fix from $1,9502019-08-01 CRITICAL 9.1 CVE-2019-1010155EPSS 9% D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE:… Dsl 2750u Firmware No fix yet Fix from $2,3002019-07-23 CRITICAL 9.8 CVE-2019-13560 D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter. Dir 655 Firmware No fix yet Fix from $2,3002019-07-11 CRITICAL 9.8 CVE-2019-13561EPSS 8% D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_c… Dir 655 Firmware No fix yet Fix from $2,3002019-07-11 HIGH 8.8 CVE-2019-13563 D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console. Dir 655 Firmware No fix yet Fix from $1,9502019-07-11 MEDIUM 6.1 CVE-2019-13562 D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_respons… Dir 655 Firmware No fix yet Fix from $1,6002019-07-11 HIGH 8.8 CVE-2019-13481EPSS 8% An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication… Dir 818lw Firmware No fix yet Fix from $1,9502019-07-10 HIGH 8.8 CVE-2019-13482EPSS 8% An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication… Dir 818lw Firmware No fix yet Fix from $1,9502019-07-10