D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

11 records in Central Wifimanager · all components

TI-2019-10045 CVE-2019-13372 · GHSA-j37h-vwh2-59wm

/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before…

HIGH 83

/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.8249 Published 2019-07-06 No fix listed CWE-287

TI-2019-10046 CVE-2019-13373 · GHSA-qwfh-q7gg-8j9q

An issue was discovered in the D-Link Central WiFi Manager CWM(100) before…

HIGH 79

An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.68019 Published 2019-07-06 No fix listed CWE-89

TI-2018-12431 CVE-2018-17440 · GHSA-m8v4-m34m-jgj6

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

HIGH 69

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.38469 Published 2018-10-08 No fix listed CWE-434

TI-2018-11070 CVE-2018-15517 · GHSA-hq7j-8qv3-mmrm

The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is…

HIGH 66

The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as dem…

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.44101 Published 2019-01-31 No fix listed CWE-918

TI-2019-10048 CVE-2019-13375 · GHSA-rvqh-525h-x96x

A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before…

HIGH 65

A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php with the index.php/Pay/passcodeAuth parameter passcode.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.28199 Published 2019-07-06 No fix listed CWE-89

TI-2018-12433 CVE-2018-17442 · GHSA-w7m4-2jq4-rrh5

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

MEDIUM 53

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.14219 Published 2018-10-08 No fix listed CWE-434

TI-2018-11068 CVE-2018-15515 · GHSA-w76v-f6xm-5cr7

The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will…

LOW 39

The CaptivelPortal service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices will load a Trojan horse "quserex.dll" from the CaptivelPortal.exe subdirectory under the D-Link directory, which allows unprivileged lo…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.02467 Published 2019-01-31 No fix listed

TI-2018-12434 CVE-2018-17443 · GHSA-4m28-vhw4-r5mc

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

LOW 36

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.05657 Published 2018-10-08 No fix listed CWE-79

TI-2018-12432 CVE-2018-17441 · GHSA-hq86-cqgq-p75f

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

LOW 36

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.05657 Published 2018-10-08 No fix listed CWE-79

TI-2019-10047 CVE-2019-13374 · GHSA-29v9-mcvr-88rv

A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in…

LOW 32

A cross-site scripting (XSS) vulnerability in resource view in PayAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to inject arbitrary web script or HTML via the in…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02369 Published 2019-07-06 No fix listed CWE-79

TI-2018-11069 CVE-2018-15516 · GHSA-h6pf-c244-8chr

The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote…

LOW 30

The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting in SSRF.

CVSS 3.0MEDIUM 5.8 Network High privileges No interaction EPSS 0.02034 Published 2019-01-31 No fix listed CWE-918

Open these records in search →