Read the docs

D-Link Japan K.K.

Records1707All Threatist records
Exploited (KEV)28In CISA KEV
CVSS critical457CVSS 9.0–10.0
CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV
TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability Priority CRITICAL 91KEV 2026-04-24TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2025-12-08TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability Priority CRITICAL 90KEV 2025-08-05TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability Priority CRITICAL 97KEV 2025-08-05TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability Priority CRITICAL 97KEV 2025-08-05TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records
Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

8 records in Dir-300 Firmware · all components

TI-2013-06209 CVE-2013-10069 · GHSA-hfjr-pxjv-x4fv

D-Link Devices Unauthenticated RCE

Priority HIGH 82

The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.16258 Published 2025-08-05 No fix listed CWE-78
TI-2013-06189 CVE-2013-10048 · GHSA-w7gc-gxjh-pg78

D-Link Devices command.php Unauthenticated RCE

Priority HIGH 81

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated comman…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.16581 Published 2025-08-01 No fix listed CWE-78
TI-2013-06191 CVE-2013-10050 · GHSA-2cvr-c5hj-x7rm

D-Link Devices tools_vct.xgi Authenticated RCE

Priority HIGH 73

An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13255 Published 2025-08-01 No fix listed CWE-78
TI-2024-00658 CVE-2024-0717 · GHSA-27wg-r456-jc87

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

Priority MEDIUM 63

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.18195 Published 2024-01-19 No fix listed CWE-200
Open these records in search →