D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

10 records in Dir-890l Firmware · all components

TI-2019-13149 CVE-2019-17621 · GHSA-4cjx-47hq-7hc2

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01…

CRITICAL 100KEV

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90615 Published 2019-12-30 No fix listed CWE-78

TI-2016-05627 CVE-2016-6563 · GHSA-2237-8cw9-xj7q

D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

HIGH 82

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.79735 Published 2018-07-13 No fix listed CWE-121

TI-2022-12147 CVE-2022-29778 · GHSA-5cg6-qf6g-ch83

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded…

HIGH 73

D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.php

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0289 Published 2022-06-03 No fix listed CWE-798

TI-2023-14119 CVE-2023-30063 · GHSA-vf3v-3g7g-88rm

D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.

HIGH 72

D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01112 Published 2023-05-01 No fix listed CWE-287

TI-2022-12678 CVE-2022-30521 · GHSA-37gv-mrx7-gfqg

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in…

MEDIUM 58

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and previous versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15122 Published 2022-05-27 No fix listed CWE-787

TI-2025-03869 CVE-2025-4340 · GHSA-rh69-7g6g-53pr

D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection

MEDIUM 57

A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05253 Published 2025-05-06 No fix listed CWE-74

TI-2017-10971 CVE-2017-14948 · GHSA-6447-8xgh-93jm

Certain D-Link products are affected by: Buffer Overflow.

MEDIUM 50

Certain D-Link products are affected by: Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04929 Published 2019-10-14 No fix listed CWE-120

TI-2019-14574 CVE-2019-20213 · GHSA-c2wf-4gpc-mpwc

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure…

LOW 37

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2020-01-02 No fix listed CWE-74

TI-2025-07531 CVE-2025-8231 · GHSA-85q8-9fqg-6jwh

D-Link DIR-890L UART Port rgbin hard-coded credentials

LOW 34

A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04.

CVSS 4.0HIGH 7.0 Physical No auth No interaction EPSS 0.00785 Published 2025-07-27 No fix listed CWE-259

TI-2018-08682 CVE-2018-12103 · GHSA-hmvr-fwh8-p62r

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier…

LOW 29

An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with firmware 1.21B04beta04 and earlier devices (all hardware revisio…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00452 Published 2018-07-05 No fix listed CWE-863

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0