D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

8 records in Dir-823 Pro Firmware · all components

TI-2022-11235 CVE-2022-28573 · GHSA-hp9x-3xwh-q8cv

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in…

HIGH 65

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.28179 Published 2022-05-02 No fix listed CWE-78

TI-2025-28826 CVE-2025-45729 · GHSA-vf67-95g7-3w77

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to…

MEDIUM 61

D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00393 Published 2025-06-27 No fix listed CWE-284

TI-2021-21245 CVE-2021-46454 · GHSA-53jh-9m5f-xcx8

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection…

MEDIUM 49

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04403 Published 2022-02-04 No fix listed CWE-77

TI-2021-21248 CVE-2021-46457 · GHSA-749p-fxxp-x88r

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection…

MEDIUM 48

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03715 Published 2022-02-04 No fix listed CWE-77

TI-2021-21247 CVE-2021-46456 · GHSA-rp79-3v9m-wp39

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection…

MEDIUM 48

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03715 Published 2022-02-04 No fix listed CWE-77

TI-2021-21246 CVE-2021-46455 · GHSA-jp3q-vh5x-qvf2

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection…

MEDIUM 48

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03715 Published 2022-02-04 No fix listed CWE-77

TI-2021-21244 CVE-2021-46453 · GHSA-5qc2-rg7j-mvjw

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection…

MEDIUM 48

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03746 Published 2022-02-04 No fix listed CWE-77

TI-2021-21243 CVE-2021-46452 · GHSA-ggcw-6ww3-6675

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection…

MEDIUM 48

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03746 Published 2022-02-04 No fix listed CWE-77

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0