Read the docs

D-Link Japan K.K.

Records1707All Threatist records
Exploited (KEV)28In CISA KEV
CVSS critical457CVSS 9.0–10.0
CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

19 records in Dir-825 Firmware · all components

Priority MEDIUM 63

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.18195 Published 2024-01-19 No fix listed CWE-200
Priority MEDIUM 63

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.32591 Published 2022-04-27 No fix listed CWE-78
Open these records in search →