Read the docs

D-Link Japan K.K.

Records1707All Threatist records
Exploited (KEV)28In CISA KEV
CVSS critical457CVSS 9.0–10.0
CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV
TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability Priority CRITICAL 91KEV 2026-04-24TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2025-12-08TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability Priority CRITICAL 90KEV 2025-08-05TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability Priority CRITICAL 97KEV 2025-08-05TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability Priority CRITICAL 97KEV 2025-08-05TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records
Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

16 records in Dir-865l Firmware · all components

TI-2019-13149 CVE-2019-17621 · GHSA-4cjx-47hq-7hc2

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01…

Priority CRITICAL 100KEV

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90615 Published 2019-12-30 No fix listed CWE-78
TI-2018-04810 CVE-2018-6530 · GHSA-j95f-33m4-87jf

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link…

Priority CRITICAL 100KEV

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_R…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96682 Published 2018-03-06 No fix listed CWE-78
TI-2018-04809 CVE-2018-6529 · GHSA-xg32-wxx9-5grm

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L…

Priority LOW 31

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01624 Published 2018-03-06 No fix listed CWE-79
TI-2018-04808 CVE-2018-6528 · GHSA-2xpj-rm54-gp8w

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L…

Priority LOW 31

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01624 Published 2018-03-06 No fix listed CWE-79
TI-2018-04807 CVE-2018-6527 · GHSA-vvr3-vw4g-8mj8

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L…

Priority LOW 31

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW11…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01624 Published 2018-03-06 No fix listed CWE-79
TI-2013-04260 CVE-2013-4856 · GHSA-7jvx-p33v-mw2x

D-Link DIR-865L has Information Disclosure.

Priority LOW 30

D-Link DIR-865L has Information Disclosure.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00871 Published 2019-10-25 No fix listed CWE-200
Open these records in search →