Dlink
Page 13 of 18 — Dlink CVEs from a corpus of 1765, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30521 | Critical | 9.8 | 2022-06-02 | The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and… |
CVE-2022-28932 | Critical | 9.8 | 2022-05-23 | D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions. |
CVE-2022-28956 | Critical | 9.8 | 2022-05-18 | An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload. |
CVE-2022-28955 | High | 7.5 | 2022-05-18 | An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php. |
CVE-2022-29332 | Medium | 6.5 | 2022-05-17 | D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's ro… |
CVE-2022-29329 | Critical | 9.8 | 2022-05-10 | D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings. |
CVE-2022-29328 | Critical | 9.8 | 2022-05-10 | D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade. |
CVE-2022-29327 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel. |
CVE-2022-29326 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter. |
CVE-2022-29325 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter. |
CVE-2022-29324 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd. |
CVE-2022-29323 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment. |
CVE-2022-29322 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip. |
CVE-2022-29321 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan. |
CVE-2022-28915 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm. |
CVE-2022-28901 | Critical | 9.8 | 2022-05-10 | A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root… |
CVE-2022-28896 | Critical | 9.8 | 2022-05-10 | A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to… |
CVE-2022-28895 | Critical | 9.8 | 2022-05-10 | A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to… |
CVE-2022-28573 | Critical | 9.8 | 2022-05-02 | D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers t… |
CVE-2022-28571 | Critical | 9.8 | 2022-05-02 | D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli. |
CVE-2021-46442 | Critical | 9.8 | 2022-04-27 | In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloadin… |
CVE-2021-46441 | High | 8.8 | 2022-04-27 | In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system comm… |
CVE-2022-1262 | High | 7.8 | 2022-04-11 | A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as ro… |
CVE-2022-27295 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of S… |
CVE-2022-27294 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial o… |
CVE-2022-27293 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Serv… |
CVE-2022-27292 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-27291 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-27290 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of… |
CVE-2022-27289 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-27288 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-27287 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPPoE. This vulnerability allows attackers to cause a Denial of Se… |
CVE-2022-27286 | High | 7.5 | 2022-04-10 | D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanNonLogin. This vulnerability allows attackers to cause a Denial of… |
CVE-2021-43474 | Critical | 9.8 | 2022-04-07 | An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any parameter in the HNAP1 function |
CVE-2022-26670 | High | 8.8 | 2022-04-07 | D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack… |
CVE-2021-43722 | Critical | 9.8 | 2022-03-31 | D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the sta… |
CVE-2022-26258 | Critical | 9.8 | 2022-03-28 | D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. |
CVE-2021-44127 | Critical | 9.8 | 2022-03-27 | In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the pa… |
CVE-2021-31326 | Critical | 9.8 | 2022-03-24 | D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi. |
CVE-2021-46353 | Medium | 5.3 | 2022-03-04 | An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP requ… |
CVE-2022-25106 | Medium | 5.5 | 2022-03-04 | D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Deni… |
CVE-2021-46381 | High | 7.5 | 2022-03-04 | Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow]. |
CVE-2021-46379 | Medium | 6.1 | 2022-03-04 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site. |
CVE-2021-46378 | High | 7.5 | 2022-03-04 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download. |
CVE-2021-46108 | Medium | 5.4 | 2022-02-18 | D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration. |
CVE-2021-46319 | Critical | 9.8 | 2022-02-17 | Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use thi… |
CVE-2021-46315 | Critical | 9.8 | 2022-02-17 | Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA… |
CVE-2021-46314 | Critical | 9.8 | 2022-02-17 | A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR8… |
CVE-2021-45382 | Critical | 9.8 | 2022-02-17 | A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via th… |
CVE-2021-41445 | Medium | 6.1 | 2022-02-10 | A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code… |
CVE-2021-41442 | High | 7.5 | 2022-02-09 | An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application… |
CVE-2021-41441 | High | 7.4 | 2022-02-09 | A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a spec… |
CVE-2021-46457 | Critical | 9.8 | 2022-02-04 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability al… |
CVE-2021-46456 | Critical | 9.8 | 2022-02-04 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allo… |
CVE-2021-46455 | Critical | 9.8 | 2022-02-04 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allo… |
CVE-2021-46454 | Critical | 9.8 | 2022-02-04 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability al… |
CVE-2021-46453 | Critical | 9.8 | 2022-02-04 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability… |
CVE-2021-46452 | Critical | 9.8 | 2022-02-04 | D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerab… |
CVE-2021-46233 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm. This vulnerability allows att… |
CVE-2021-46232 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp. This vulnerability all… |
CVE-2021-46231 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp. This vulnerability allows at… |
CVE-2021-46230 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows a… |
CVE-2021-46229 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows at… |
CVE-2021-46228 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows… |
CVE-2021-46227 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows… |
CVE-2021-46226 | Critical | 9.8 | 2022-02-04 | D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows at… |
CVE-2021-45998 | Critical | 9.8 | 2022-02-04 | D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerabili… |
CVE-2021-44882 | Critical | 9.8 | 2022-02-04 | D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attac… |
CVE-2021-44881 | Critical | 9.8 | 2022-02-04 | D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allo… |
CVE-2021-44880 | Critical | 9.8 | 2022-02-04 | D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the… |
CVE-2021-20134 | High | 8.4 | 2021-12-30 | Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authent… |
CVE-2021-20133 | Medium | 6.1 | 2021-12-30 | Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authent… |
CVE-2021-20132 | High | 8.8 | 2021-12-30 | Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administ… |
CVE-2021-33274 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FU… |
CVE-2021-33271 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function su… |
CVE-2021-33270 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FU… |
CVE-2021-33269 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FU… |
CVE-2021-33268 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function su… |
CVE-2021-33267 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FU… |
CVE-2021-33266 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FU… |
CVE-2021-33265 | Critical | 9.8 | 2021-12-01 | D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FU… |
CVE-2021-42784 | Critical | 9.8 | 2021-11-23 | OS Command Injection vulnerability in debug_fcgi of D-Link DWR-932C E1 firmware allows a remote attacker to perform command injection via a crafted HTTP reques… |
CVE-2021-42783 | Critical | 9.8 | 2021-11-23 | Missing Authentication for Critical Function vulnerability in debug_post_set.cgi of D-Link DWR-932C E1 firmware allows an unauthenticated attacker to execute a… |
CVE-2020-25368 | Critical | 9.8 | 2021-11-04 | A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbit… |
CVE-2020-25366 | Critical | 9.1 | 2021-11-04 | An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vec… |
CVE-2020-25367 | Critical | 9.8 | 2021-11-04 | A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbit… |
CVE-2021-33259 | Medium | 5.3 | 2021-10-31 | Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history. |
CVE-2021-34863 | High | 8.8 | 2021-10-25 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication i… |
CVE-2021-34862 | High | 8.8 | 2021-10-25 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication i… |
CVE-2021-34861 | High | 8.8 | 2021-10-25 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication i… |
CVE-2021-34860 | Medium | 6.5 | 2021-10-25 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authenti… |
CVE-2021-41753 | High | 7.5 | 2021-09-27 | A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated… |
CVE-2021-40655 | High | 7.5 | 2021-09-24 | An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request… |
CVE-2021-40654 | Medium | 6.5 | 2021-09-24 | An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the / getcfg.ph… |
CVE-2021-41504 | High | 8.0 | 2021-09-24 | An Elevated Privileges issue exists in D-Link DCS-5000L v1.05 and DCS-932L v2.17 and older. The use of the digest-authentication for the devices command interf… |
CVE-2021-41503 | High | 8.0 | 2021-09-24 | DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface all… |
CVE-2021-21913 | Critical | 9.8 | 2021-09-23 | An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to… |
CVE-2021-40284 | Medium | 6.5 | 2021-09-09 | D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interface "/cgi-bi… |
CVE-2021-39510 | Critical | 9.8 | 2021-08-24 | An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2use… |
CVE-2021-39509 | Critical | 9.8 | 2021-08-24 | An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userco… |