D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

9 records in Dir-845l Firmware · all components

TI-2024-21940 CVE-2024-33110 · GHSA-5x44-874c-9rmj

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component.

HIGH 80

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00741 Published 2024-05-06 No fix listed CWE-287

TI-2024-21942 CVE-2024-33112 · GHSA-q9cc-2q3j-jfm7

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.

HIGH 74

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06457 Published 2024-05-06 No fix listed CWE-78

TI-2024-19439 CVE-2024-29385 · GHSA-w4j4-p425-4fwc

DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability…

HIGH 74

DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01557 Published 2024-03-22 No fix listed CWE-77

TI-2024-19431 CVE-2024-29366 · GHSA-326w-5g95-5244

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.

HIGH 73

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02408 Published 2024-03-22 No fix listed CWE-77

TI-2024-21943 CVE-2024-33113 · GHSA-vf5w-x6g7-5c7q

D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

MEDIUM 57

D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.03419 Published 2024-05-06 No fix listed CWE-77

TI-2022-17004 CVE-2022-36756 · GHSA-358p-6p52-c6g9

DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

MEDIUM 48

DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03325 Published 2022-08-28 No fix listed CWE-94

TI-2022-17003 CVE-2022-36755 · GHSA-m4pg-623x-3c8h

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1…

MEDIUM 45

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0148 Published 2022-08-28 No fix listed CWE-287

TI-2022-18140 CVE-2022-38557 · GHSA-p8fm-6qr8-796r

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

MEDIUM 44

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01008 Published 2022-08-28 No fix listed CWE-287

TI-2024-21941 CVE-2024-33111 · GHSA-72jp-9hf9-ghfp

D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.

LOW 26

D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00802 Published 2024-05-06 No fix listed CWE-79

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0