D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

25 records in Dir-3040 Firmware · all components

TI-2022-22070 CVE-2022-44832 · GHSA-4rc3-56q2-qpp2

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection…

MEDIUM 56

D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04046 Published 2022-12-14 No fix listed CWE-77

TI-2021-04865 CVE-2021-21820 · GHSA-gmq9-r2m4-2qvg

Hard-coded credentials in D-Link

MEDIUM 47

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02962 Published 2021-07-16 No fix listed CWE-798

TI-2021-04958 CVE-2021-21913 · GHSA-22wh-wq8h-xvf8

Hard-coded credentials in D-Link

MEDIUM 46

An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02187 Published 2021-09-23 No fix listed CWE-798

TI-2021-04861 CVE-2021-21816 · GHSA-c5h4-7vc8-8w5m

Information disclosure in D-LINK

MEDIUM 45

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.32385 Published 2021-07-16 No fix listed CWE-200

TI-2023-21839 CVE-2023-41230 · GHSA-cxm9-9r6p-3785

Stack-based buffer overflow in D-Link DIR-3040

MEDIUM 42

D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00959 Published 2024-05-03 No fix listed CWE-121

TI-2023-21838 CVE-2023-41229 · GHSA-7fh8-jfq5-3gc5

Heap-based buffer overflow in D-Link DIR-3040

MEDIUM 42

D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01038 Published 2024-05-03 No fix listed CWE-122

TI-2022-21416 CVE-2022-43648 · GHSA-p682-rxp7-r33h

Heap-based buffer overflow in D-Link DIR-3040

MEDIUM 42

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00911 Published 2023-03-29 No fix listed CWE-122

TI-2022-01147 CVE-2022-1262 · GHSA-q6c3-c7qx-wh5h

OS command injection in D-Link Routers

LOW 38

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02211 Published 2022-04-11 No fix listed CWE-78

TI-2021-04864 CVE-2021-21819 · GHSA-chxw-2vjc-ppm6

OS command injection in D-Link

LOW 37

A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02886 Published 2021-07-16 No fix listed CWE-78

TI-2021-04862 CVE-2021-21817 · GHSA-276x-48pw-fmh3

Information disclosure in D-Link

LOW 37

An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02013 Published 2021-07-16 No fix listed CWE-200

TI-2021-04863 CVE-2021-21818 · GHSA-7q5h-m822-4m7w

Hard-coded credentials in D-Link

LOW 36

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01691 Published 2021-07-16 No fix listed CWE-259

TI-2023-21826 CVE-2023-41217 · GHSA-j46m-35mg-whvf

Stack-based buffer overflow in D-Link DIR-3040

LOW 35

D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.1 Adjacent network Low privileges No interaction EPSS 0.00746 Published 2024-05-03 No fix listed CWE-121

TI-2023-21837 CVE-2023-41228 · GHSA-84g3-f88g-74fq

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2023-21836 CVE-2023-41227 · GHSA-cm6j-82c5-ggcj

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2023-21835 CVE-2023-41226 · GHSA-wx9p-r67p-8cjf

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2023-21834 CVE-2023-41225 · GHSA-396g-3mmq-29wc

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2023-21833 CVE-2023-41224 · GHSA-hphp-8vrw-jr5x

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00874 Published 2024-05-03 No fix listed CWE-121

TI-2023-21832 CVE-2023-41223 · GHSA-54h8-92cq-9gxw

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00874 Published 2024-05-03 No fix listed CWE-121

TI-2023-21831 CVE-2023-41222 · GHSA-xm4h-65xf-x594

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00874 Published 2024-05-03 No fix listed CWE-121

TI-2023-21830 CVE-2023-41221 · GHSA-9997-w8mf-jp86

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00874 Published 2024-05-03 No fix listed CWE-121

TI-2023-21829 CVE-2023-41220 · GHSA-pc4x-j8x7-66jg

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2023-21828 CVE-2023-41219 · GHSA-6qj8-69gc-hqf2

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2023-21827 CVE-2023-41218 · GHSA-5683-vqrc-j724

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00874 Published 2024-05-03 No fix listed CWE-121

TI-2023-21825 CVE-2023-41216 · GHSA-q2jj-h86w-hpw2

Stack-based buffer overflow in D-Link DIR-3040

LOW 34

D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.009 Published 2024-05-03 No fix listed CWE-121

TI-2024-04918 CVE-2024-5294

Memory leak in D-Link DIR-3040

LOW 29

D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0046 Published 2024-05-23 No fix listed CWE-401

Open these records in search →