Priority MEDIUM 63
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.18195 · Published 2024-01-19 · No fix listed CWE-200
Priority MEDIUM 42
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01101 · Published 2024-05-03 · No fix listed CWE-121
Priority MEDIUM 42
D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00916 · Published 2024-05-03 · No fix listed CWE-259
Priority MEDIUM 42
D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01038 · Published 2024-05-03 · No fix listed CWE-121
Priority MEDIUM 42
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01134 · Published 2024-05-03 · No fix listed CWE-197
Priority MEDIUM 42
D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01101 · Published 2024-05-03 · No fix listed CWE-121
Priority MEDIUM 42
D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01101 · Published 2024-05-03 · No fix listed CWE-121
Priority MEDIUM 42
D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01038 · Published 2024-05-03 · No fix listed CWE-121
Priority MEDIUM 42
D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00931 · Published 2024-05-03 · No fix listed CWE-122
Priority MEDIUM 42
D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01155 · Published 2024-05-03 · No fix listed CWE-121
Priority LOW 37
D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.00913 · Published 2024-05-03 · No fix listed CWE-122
Priority LOW 31
D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01167 · Published 2024-05-03 · No fix listed CWE-22
Priority LOW 31
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change t…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00785 · Published 2015-01-13 · No fix listed CWE-352
Priority LOW 31
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enab…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00785 · Published 2015-01-13 · No fix listed CWE-352
Priority LOW 27
index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02042 · Published 2015-01-13 · No fix listed CWE-200
Priority LOW 22
Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00995 · Published 2015-01-13 · No fix listed CWE-79