Priority CRITICAL 100KEV
Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99996 · Published 2019-09-27 · No fix listed CWE-78
Priority CRITICAL 100KEV
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99971 · Published 2015-05-01 · No fix listed
Priority HIGH 77
The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.6307 · Published 2022-08-23 · No fix listed
Priority HIGH 73
An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.13255 · Published 2025-08-01 · No fix listed CWE-78
Priority HIGH 72
A vulnerability was found in D-Link DIR-615 4.10.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.05448 · Published 2026-02-08 · No fix listed CWE-77
Priority HIGH 72
A vulnerability has been found in D-Link DIR-615 4.10.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.05304 · Published 2026-02-08 · No fix listed CWE-77
Priority HIGH 72
A vulnerability was detected in D-Link DIR-615 up to 4.10.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.05775 · Published 2026-01-26 · No fix listed CWE-77
Priority HIGH 71
D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44918 · Published 2018-08-28 · No fix listed CWE-119
Priority MEDIUM 63
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.18195 · Published 2024-01-19 · No fix listed CWE-200
Priority MEDIUM 61
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to e…
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.10409 · Published 2025-08-27 · No fix listed CWE-78
Priority MEDIUM 48
A vulnerability was determined in D-Link DIR-615 4.10.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.0557 · Published 2026-01-28 · No fix listed CWE-77
Priority MEDIUM 48
A buffer overflow in D-Link DIR-615 C2 3.03WW.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0374 · Published 2021-08-06 · No fix listed CWE-120
Priority MEDIUM 47
A vulnerability was found in D-Link DIR-615 4.10.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.05066 · Published 2026-01-28 · No fix listed CWE-77
Priority MEDIUM 47
The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0584 · Published 2020-04-21 · No fix listed CWE-307
Priority MEDIUM 41
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.19834 · Published 2019-12-18 · No fix listed CWE-79
Priority MEDIUM 41
An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.02958 · Published 2019-10-09 · No fix listed CWE-306
Priority LOW 33
An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01859 · Published 2021-09-24 · No fix listed CWE-863
Priority LOW 30
Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01176 · Published 2018-08-25 · No fix listed CWE-79
Priority LOW 30
Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01176 · Published 2018-08-25 · No fix listed CWE-79
THREATIST.IORead the docs