Browse CVEs

CRITICAL 9.8 CVE-2019-9123 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password. Dir 825 Rev.b Firmware No fix yet Fix from $2,3002019-02-25 HIGH 7.5 CVE-2019-9126 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml d… Dir 825 Rev.b Firmware No fix yet Fix from $1,9502019-02-25 HIGH 8.8 CVE-2019-9122EPSS 24% An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter … Dir 825 Rev.b Firmware No fix yet Fix from $1,9502019-02-25 HIGH 7.5 CVE-2019-8392 An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers to enable Guest… Dir 823g Firmware No fix yet Fix from $1,9502019-02-17 HIGH 8.8 CVE-2019-8312EPSS 7% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8313EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8314EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8315EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8316EPSS 7% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8317EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8318EPSS 6% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 HIGH 8.8 CVE-2019-8319EPSS 8% An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbit… Dir 878 Firmware No fix yet Fix from $1,9502019-02-13 CRITICAL 9.8 CVE-2019-7736 D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101. Dir 600m Firmware No fix yet Fix from $2,3002019-02-11 HIGH 8.6 CVE-2019-7390 An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers… Dir 823g Firmware No fix yet Fix from $1,9502019-02-05 HIGH 7.5 CVE-2019-7388 An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03. There is incorrect access control allowing remote attackers… Dir 823g Firmware No fix yet Fix from $1,9502019-02-05 HIGH 7.5 CVE-2019-7389 An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03. There is incorrect access control allowing remote attac… Dir 823g Firmware No fix yet Fix from $1,9502019-02-05 HIGH 8.1 CVE-2019-7298EPSS 10% An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbit… Dir 823g Firmware after 1.02b03 Fix from $1,9502019-02-01 HIGH 8.6 CVE-2018-15517EPSS 44% The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually all… Central Wifimanager No fix yet Fix from $1,9502019-01-31 HIGH 7.8 CVE-2018-15515 The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.ex… Central Wifimanager No fix yet Fix from $1,9502019-01-31 MEDIUM 5.8 CVE-2018-15516 The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000,… Central Wifimanager No fix yet Fix from $1,6002019-01-31 CRITICAL 9.8 CVE-2018-20675 D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-8… Dir 822 Firmware after 3.10b06 Fix from $2,3002019-01-09 HIGH 8.8 CVE-2018-20674 D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-8… Dir 822 Firmware after 3.10b06 Fix from $1,9502019-01-09 CRITICAL 9.8 CVE-2018-20114EPSS 7% On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service… Dir 818lw Firmware No fix yet Fix from $2,3002019-01-02 CRITICAL 9.8 CVE-2018-20445 D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1… Dcm 604 Firmware No fix yet Fix from $2,3002018-12-25 CRITICAL 9.8 CVE-2018-18007 atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin credentials. Dsl 2770l Firmware Mitigation only Fix from $2,3002018-12-21 CRITICAL 9.8 CVE-2018-18008 spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials. Dsl 2770l Firmware Mitigation only Fix from $2,3002018-12-21 CRITICAL 9.8 CVE-2018-18009 dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials. Dir 140l Firmware Mitigation only Fix from $2,3002018-12-21 HIGH 7.0 CVE-2018-18767 An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app (e.g., change camera settings or pl… Mydlink Baby Camera Monitor No fix yet Fix from $1,9502018-12-20 CRITICAL 9.8 CVE-2018-17777 An issue was discovered on D-Link DVA-5592 A1_WI_20180823 devices. If the PIN of the page "/ui/cbpc/login" is the default Parental Control PIN (0000)… Dva 5592 Firmware Mitigation only Fix from $2,3002018-12-18 CRITICAL 9.8 CVE-2018-10824EPSS 12% An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR… Dwr 116 Firmware after 2.02 Fix from $2,3002018-10-17