D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

12 records in Dir-645 Firmware · all components

TI-2015-01840 CVE-2015-2051 · GHSA-x629-5xff-w7qg

The D-Link DIR-645 Wired/Wireless Router Rev.

CRITICAL 97KEV

The D-Link DIR-645 Wired/Wireless Router Rev.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.97101 Published 2015-02-23 No fix listed CWE-77

TI-2022-22965 CVE-2022-46475 · GHSA-9rx4-v8w3-r8ff

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the…

HIGH 82

D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09529 Published 2023-01-17 No fix listed CWE-787

TI-2013-06123 CVE-2013-7471 · GHSA-w6mr-25xf-vppm

An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03…

MEDIUM 63

An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24592 Published 2019-06-11 No fix listed CWE-77

TI-2018-15341 CVE-2018-25115 · GHSA-f5fw-w387-r642

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

MEDIUM 61

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to e…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.10409 Published 2025-08-27 No fix listed CWE-78

TI-2025-09786 CVE-2025-10689 · GHSA-v646-45pg-pvq7

D-Link DIR-645 soap.cgi soapcgi_main command injection

MEDIUM 57

A vulnerability was identified in D-Link DIR-645 105B01.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04149 Published 2025-09-18 No fix listed CWE-74

TI-2025-06554 CVE-2025-7192 · GHSA-w9ww-h3pr-mc4g

D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection

MEDIUM 57

A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04208 Published 2025-07-08 No fix listed CWE-74

TI-2023-18110 CVE-2023-36089 · GHSA-2g94-9xch-xc29

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote…

MEDIUM 52

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgi_main in cgibin.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01464 Published 2023-07-31 No fix listed CWE-863

TI-2022-13852 CVE-2022-32092 · GHSA-62gh-4vwr-c5mm

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the…

MEDIUM 51

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05799 Published 2022-06-27 No fix listed CWE-78

TI-2015-01841 CVE-2015-2052 · GHSA-cpxr-x8w8-p34j

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev.

MEDIUM 51

Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05205 Published 2015-02-23 No fix listed CWE-119

TI-2021-19543 CVE-2021-43722 · GHSA-g42p-p7j5-qqx7

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow.

MEDIUM 48

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03162 Published 2022-03-31 No fix listed CWE-787

TI-2013-06053 CVE-2013-7389 · GHSA-w84x-2hxj-9gfv

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev.

MEDIUM 42

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.27753 Published 2014-07-07 No fix listed CWE-79

TI-2020-15793 CVE-2020-25786 · GHSA-5x8h-xjj6-w38j

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows…

LOW 29

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00988 Published 2020-09-19 No fix listed CWE-79

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0