Priority CRITICAL 100KEV
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE reque…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.90615 · Published 2019-12-30 · No fix listed CWE-78
Priority HIGH 82
D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02024 · Published 2024-01-11 · No fix listed CWE-78
Priority HIGH 82
Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.79735 · Published 2018-07-13 · No fix listed CWE-121
Priority HIGH 76
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01085 · Published 2024-01-11 · No fix listed CWE-306
Priority HIGH 70
A vulnerability was determined in D-Link DIR-822 A_101.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02722 · Published 2026-04-26 · No fix listed CWE-74
Priority MEDIUM 63
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.18195 · Published 2024-01-19 · No fix listed CWE-200
Priority MEDIUM 56
D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAcc…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1204 · Published 2019-05-13 · No fix listed CWE-78
Priority MEDIUM 56
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.1…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11927 · Published 2016-08-25 · No fix listed CWE-119
Priority MEDIUM 51
In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05543 · Published 2019-05-13 · No fix listed CWE-78
Priority MEDIUM 46
D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01835 · Published 2019-01-09 · No fix listed CWE-287
Priority MEDIUM 43
D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command e…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02534 · Published 2019-01-09 · No fix listed
Priority LOW 37
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02181 · Published 2020-01-02 · No fix listed CWE-74