TI-2024-00708 CVE-2024-0769 · GHSA-w828-74x3-f6hx
D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
Priority CRITICAL 100KEV
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01.
D-Link Japan K.K.
Records1707All Threatist records
Exploited (KEV)28In CISA KEV
CVSS critical457CVSS 9.0–10.0
CVSS high851CVSS 7.0–8.9
Exploited now
D-Link Japan K.K. records in CISA KEVTI-2025-21151 D-Link DIR-823X Command Injection Vulnerability TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Dir-859 Firmware · all components
TI-2019-13149 CVE-2019-17621 · GHSA-4cjx-47hq-7hc2
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01…
Priority CRITICAL 100KEV
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE reque…
TI-2019-14575 CVE-2019-20215 · GHSA-xj55-9jj5-7q99
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute…
Priority HIGH 81
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled.
TI-2019-14577 CVE-2019-20217 · GHSA-rm3g-gj58-gg6q
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute…
Priority MEDIUM 48
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because SERVER_ID is mishandled.
TI-2019-14576 CVE-2019-20216 · GHSA-v9mx-483f-5528
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute…
Priority MEDIUM 48
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because REMOTE_PORT is mishandled.
TI-2023-18113 CVE-2023-36092 · GHSA-29mx-8r38-hfxq
Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to…
Priority MEDIUM 46
Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main.
TI-2019-14574 CVE-2019-20213 · GHSA-c2wf-4gpc-mpwc
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure…
Priority LOW 37
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
TI-2022-08844 CVE-2022-25106 · GHSA-wjq5-hxjh-57xx
D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the…
Priority LOW 36
D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main.