D-Link

Records980All Threatist records

Exploited (KEV)26In CISA KEV

CVSS critical166CVSS 9.0–10.0

CVSS high505CVSS 7.0–8.9

Exploited now

D-Link records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dsl-3782 Firmware 7 records MEDIUM Dir-822 Firmware 5 records HIGH Dir-823g Firmware 5 records MEDIUM Di-604 4 records LOW Dcs-825l Firmware 3 records LOW Di-614+ 3 records LOW Dir-615 Firmware 3 records MEDIUM Dir-620 Firmware 3 records MEDIUM

Records

5 records in Dir-823g Firmware · all components

TI-2019-05186 CVE-2019-7297 · GHSA-8jwc-8ww6-25xw

An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.

MEDIUM 56

An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.12458 Published 2019-01-31 No fix listed CWE-78

TI-2018-12659 CVE-2018-17786 · GHSA-ff4r-qf8v-wjf5

On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh…

MEDIUM 49

On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do not require authentication, which allows remote attackers to execute arbitrary code.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04115 Published 2018-10-02 No fix listed CWE-287

TI-2018-12660 CVE-2018-17787 · GHSA-jq8r-c5mq-7jcx

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via…

MEDIUM 48

On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the POST data, because this data is sent directly to the "system" library function.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03661 Published 2018-10-02 No fix listed CWE-78

TI-2018-12715 CVE-2018-17881 · GHSA-jpmw-83xj-phgp

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1…

MEDIUM 45

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 SetPasswdSettings commands without authentication to trigger an admin password change.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01503 Published 2018-10-03 No fix listed CWE-640

TI-2018-12714 CVE-2018-17880 · GHSA-58q6-vx8p-95c2

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot…

LOW 36

On D-Link DIR-823G 2018-09-19 devices, the GoAhead configuration allows /HNAP1 RunReboot commands without authentication to trigger a reboot.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01576 Published 2018-10-03 No fix listed CWE-306

Open these records in search →

Critical	166
High	505
Medium	306
Low	3
No CVSS	0