D-Link

Records980All Threatist records

Exploited (KEV)26In CISA KEV

CVSS critical166CVSS 9.0–10.0

CVSS high505CVSS 7.0–8.9

Exploited now

D-Link records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dsl-3782 Firmware 7 records MEDIUM Dir-822 Firmware 5 records HIGH Dir-823g Firmware 5 records MEDIUM Di-604 4 records LOW Dcs-825l Firmware 3 records LOW Di-614+ 3 records LOW Dir-615 Firmware 3 records MEDIUM Dir-620 Firmware 3 records MEDIUM

Records

4 records in Di-604 · all components

TI-2010-02202 CVE-2010-2293 · GHSA-vq2h-6r6j-7wj3

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to…

LOW 32

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01157 Published 2010-06-15 No fix listed CWE-20

TI-2004-00602 CVE-2004-0661 · GHSA-rcf3-hf9p-7v6j

Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier…

LOW 27

Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02276 Published 2004-07-13 No fix listed

TI-2010-02201 CVE-2010-2292 · GHSA-mp8j-698r-2p98

Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604…

LOW 22

Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00891 Published 2010-06-15 No fix listed CWE-79

TI-2008-01209 CVE-2008-1258 · GHSA-pmwc-gmxj-q9qf

Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows…

LOW 22

Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00965 Published 2008-03-10 No fix listed CWE-79

Open these records in search →

Critical	166
High	505
Medium	306
Low	3
No CVSS	0