D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

73 records in Dir-816 Firmware · all components

TI-2025-28895 CVE-2025-45931 · GHSA-9jfw-xxf9-x4vw

An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker…

HIGH 82

An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2025-06-30 No fix listed CWE-77

TI-2024-38028 CVE-2024-57684 · GHSA-gh49-2v7g-42wj

An access control issue in the component formDMZ.cgi of D-Link…

HIGH 82

An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14755 Published 2025-01-16 No fix listed CWE-276

TI-2023-09977 CVE-2023-24331 · GHSA-2mfw-8h6x-jgc4

Command Injection vulnerability in D-Link Dir 816 with firmware version…

HIGH 82

Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02122 Published 2024-02-21 No fix listed CWE-77

TI-2022-20974 CVE-2022-43003 · GHSA-w897-xc8j-4g89

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue…

HIGH 82

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01414 Published 2022-10-26 No fix listed CWE-787

TI-2022-20973 CVE-2022-43002 · GHSA-84x9-g98v-6qpc

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the…

HIGH 82

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01414 Published 2022-10-26 No fix listed CWE-787

TI-2022-20972 CVE-2022-43001 · GHSA-m634-qv6v-fgvh

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue…

HIGH 82

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01414 Published 2022-10-26 No fix listed CWE-787

TI-2022-20971 CVE-2022-43000 · GHSA-8g74-45pc-67v3

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the…

HIGH 82

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01414 Published 2022-10-26 No fix listed CWE-787

TI-2022-20969 CVE-2022-42998 · GHSA-j4j6-6hfx-pfq5

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip…

HIGH 82

D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01396 Published 2022-10-26 No fix listed CWE-787

TI-2025-05070 CVE-2025-5630 · GHSA-c75r-6jvf-vrx7

D-Link DIR-816 form2lansetup.cgi stack-based overflow

HIGH 81

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02722 Published 2025-06-05 No fix listed CWE-119

TI-2025-05064 CVE-2025-5624 · GHSA-q54j-vxv9-x54v

D-Link DIR-816 QoSPortSetup stack-based overflow

HIGH 81

A vulnerability was found in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02626 Published 2025-06-05 No fix listed CWE-119

TI-2025-05063 CVE-2025-5623 · GHSA-v8p3-7jrm-c3rr

D-Link DIR-816 qosClassifier stack-based overflow

HIGH 81

A vulnerability was found in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.19479 Published 2025-06-05 No fix listed CWE-119

TI-2025-05062 CVE-2025-5622 · GHSA-h882-r4xj-2hcq

D-Link DIR-816 wirelessApcli_5g stack-based overflow

HIGH 81

A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02626 Published 2025-06-05 No fix listed CWE-119

TI-2024-16080 CVE-2024-24321 · GHSA-34vw-rxxh-698f

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary…

HIGH 76

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01937 Published 2024-02-08 No fix listed CWE-77

TI-2026-03631 CVE-2026-4184 · GHSA-ghg2-4grw-v95p

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

HIGH 73

A vulnerability was detected in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01232 Published 2026-03-15 No fix listed CWE-119

TI-2026-03630 CVE-2026-4183 · GHSA-f27h-vmvh-757r

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

HIGH 73

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01232 Published 2026-03-15 No fix listed CWE-119

TI-2026-03629 CVE-2026-4182 · GHSA-jmxw-gwqc-xrm5

D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow

HIGH 73

A weakness has been identified in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01121 Published 2026-03-15 No fix listed CWE-119

TI-2026-03628 CVE-2026-4181 · GHSA-3v32-rh46-55wq

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

HIGH 73

A security flaw has been discovered in D-Link DIR-816 1.10CNB05.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01232 Published 2026-03-15 No fix listed CWE-119

TI-2025-37754 CVE-2025-60679 · GHSA-xhj4-39f6-qqcq

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware…

HIGH 73

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware version information.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00714 Published 2025-11-13 No fix listed CWE-121

TI-2022-20970 CVE-2022-42999 · GHSA-7v37-cpgh-grvq

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection…

HIGH 72

D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02584 Published 2022-10-26 No fix listed CWE-78

TI-2025-05061 CVE-2025-5621 · GHSA-j6wp-hqmg-gx4g

D-Link DIR-816 qosClassifier os command injection

HIGH 70

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05369 Published 2025-06-04 No fix listed CWE-77

TI-2025-05060 CVE-2025-5620 · GHSA-q445-fpwx-qv82

D-Link DIR-816 setipsec_config os command injection

HIGH 70

A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05522 Published 2025-06-04 No fix listed CWE-77

TI-2024-12156 CVE-2024-13108 · GHSA-44cf-cppv-qcvq

D-Link DIR-816 A2 form2NetSniper.cgi access control

HIGH 70

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01016 Published 2025-01-02 No fix listed CWE-266

TI-2024-12155 CVE-2024-13107 · GHSA-9gjc-g99x-6m58

D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access control

HIGH 70

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01118 Published 2025-01-02 No fix listed CWE-266

TI-2024-12154 CVE-2024-13106 · GHSA-prjv-6q89-p458

D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access control

HIGH 70

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.26002 Published 2025-01-02 No fix listed CWE-266

TI-2024-12153 CVE-2024-13105 · GHSA-7wfp-728m-cc5p

D-Link DIR-816 A2 DHCPD Setting form2Dhcpd.cgi access control

HIGH 70

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00823 Published 2025-01-02 No fix listed CWE-266

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0