D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

15 records in Dir-816l Firmware · all components

TI-2025-12058 CVE-2025-13188 · GHSA-5788-x3vg-5gpv

D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow

HIGH 81

A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02386 Published 2025-11-14 No fix listed CWE-119

TI-2025-12061 CVE-2025-13191 · GHSA-fj3w-7rxg-jxhm

D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow

HIGH 73

A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00974 Published 2025-11-15 No fix listed CWE-119

TI-2025-12060 CVE-2025-13190 · GHSA-f4hm-5v9c-8vx2

D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow

HIGH 73

A vulnerability was found in D-Link DIR-816L 2_06_b09_beta.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0089 Published 2025-11-15 No fix listed CWE-119

TI-2025-12059 CVE-2025-13189 · GHSA-27q7-wp8x-jjqq

D-Link DIR-816L gena.cgi genacgi_main stack-based overflow

HIGH 73

A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00974 Published 2025-11-15 No fix listed CWE-119

TI-2025-07160 CVE-2025-7836 · GHSA-fwww-pvgq-792r

D-Link DIR-816L Environment Variable cgibin lxmldbc_system command injection

HIGH 65

A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.06217 Published 2025-07-19 No fix listed CWE-74

TI-2022-11547 CVE-2022-28956 · GHSA-vxg4-4c48-6gwj

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to…

MEDIUM 62

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22684 Published 2022-05-18 No fix listed

TI-2020-12510 CVE-2020-15893 · GHSA-q86m-xf2x-qj8j

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

MEDIUM 61

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.20856 Published 2020-07-22 No fix listed CWE-78

TI-2022-11546 CVE-2022-28955 · GHSA-h93j-r724-8967

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to…

MEDIUM 60

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.39733 Published 2022-05-18 No fix listed CWE-287

TI-2019-05386 CVE-2019-7642 · GHSA-6388-29mv-4hjx

D-Link routers with the mydlink feature have some web interfaces without authentication…

LOW 38

D-Link routers with the mydlink feature have some web interfaces without authentication requirements.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02604 Published 2019-03-25 No fix listed CWE-306

TI-2020-12511 CVE-2020-15894 · GHSA-4xhc-v448-j5jx

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

LOW 36

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01688 Published 2020-07-22 No fix listed CWE-306

TI-2015-05072 CVE-2015-5999 · GHSA-jxc8-5pqf-69r6

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L…

LOW 36

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03214 Published 2015-11-18 No fix listed CWE-352

TI-2020-12512 CVE-2020-15895 · GHSA-cqvc-98g2-g2j9

An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

LOW 33

An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02848 Published 2020-07-22 No fix listed CWE-79

TI-2025-28959 CVE-2025-46176 · GHSA-hqp6-q766-2qrf

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L…

LOW 31

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00394 Published 2025-05-23 No fix listed CWE-77

TI-2025-08917 CVE-2025-9727 · GHSA-486j-328h-2hww

D-Link DIR-816L soap.cgi soapcgi_main os command injection

LOW 31

A weakness has been identified in D-Link DIR-816L 206b01.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.04366 Published 2025-08-31 No fix listed CWE-77

TI-2020-15793 CVE-2020-25786 · GHSA-5x8h-xjj6-w38j

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows…

LOW 29

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00988 Published 2020-09-19 No fix listed CWE-79

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0