D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

45 records in Dns-320lw Firmware · all components

TI-2024-03070 CVE-2024-3273 · GHSA-52h8-5hwm-jv8x

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

CRITICAL 100KEV

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99995 Published 2024-04-04 No fix listed CWE-77

TI-2024-03069 CVE-2024-3272 · GHSA-qr33-7mgh-rqvr

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

CRITICAL 100KEV

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98109 Published 2024-04-04 No fix listed CWE-798

TI-2024-10117 CVE-2024-10914 · GHSA-qp96-9hxv-3xx4

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

CRITICAL 92

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.97543 Published 2024-11-06 No fix listed CWE-707

TI-2024-10118 CVE-2024-10915 · GHSA-6cgw-73x3-c2h9

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

HIGH 83

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.83242 Published 2024-11-06 No fix listed CWE-707

TI-2026-04556 CVE-2026-5214 · GHSA-46rv-vf36-7m9j

D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow

HIGH 73

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00727 Published 2026-03-31 No fix listed CWE-119

TI-2026-04555 CVE-2026-5213 · GHSA-rgch-x4h6-m876

D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow

HIGH 73

A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00727 Published 2026-03-31 No fix listed CWE-119

TI-2026-04554 CVE-2026-5212 · GHSA-42h9-h8r4-fwqg

D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow

HIGH 73

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0075 Published 2026-03-31 No fix listed CWE-119

TI-2026-03659 CVE-2026-4212 · GHSA-m5mx-7f32-mh68

D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow

HIGH 73

A security vulnerability has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00825 Published 2026-03-16 No fix listed CWE-119

TI-2026-03658 CVE-2026-4211 · GHSA-j655-wmx8-5w9x

D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow

HIGH 73

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00825 Published 2026-03-16 No fix listed CWE-119

TI-2024-07257 CVE-2024-7832 · GHSA-wcjv-6xqv-vm87

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow

HIGH 73

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345,…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0214 Published 2024-08-15 No fix listed CWE-120

TI-2024-07256 CVE-2024-7831 · GHSA-38wc-99fv-jfwv

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow

HIGH 73

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01821 Published 2024-08-15 No fix listed CWE-120

TI-2024-07255 CVE-2024-7830 · GHSA-gv8w-244w-5xfq

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow

HIGH 73

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DN…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01821 Published 2024-08-15 No fix listed CWE-120

TI-2024-07253 CVE-2024-7828 · GHSA-c2p2-p654-9c4p

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow

HIGH 73

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-3…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.16225 Published 2024-08-15 No fix listed CWE-120

TI-2026-04553 CVE-2026-5211 · GHSA-v5wq-39jv-hmwm

D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow

HIGH 71

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 a…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00727 Published 2026-03-31 No fix listed CWE-119

TI-2026-03661 CVE-2026-4214 · GHSA-qg8f-975j-pm28

D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow

HIGH 71

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00841 Published 2026-03-16 No fix listed CWE-119

TI-2026-03660 CVE-2026-4213 · GHSA-wqj8-xmhx-vvcm

D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow

HIGH 71

A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-12…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00774 Published 2026-03-16 No fix listed CWE-119

TI-2024-07254 CVE-2024-7829 · GHSA-j2xh-32vh-pwww

D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow

HIGH 71

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01821 Published 2024-08-15 No fix listed CWE-120

TI-2026-04644 CVE-2026-5312 · GHSA-mgj3-965m-6684

D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control

HIGH 70

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0055 Published 2026-04-01 No fix listed CWE-266

TI-2026-04643 CVE-2026-5311 · GHSA-8c3r-vjwj-2gvx

D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control

HIGH 70

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01029 Published 2026-04-01 No fix listed CWE-266

TI-2024-10119 CVE-2024-10916 · GHSA-fj2w-q5f7-w82f

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L HTTP GET Request info.xml information disclosure

HIGH 70

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01504 Published 2024-11-06 No fix listed CWE-200

TI-2026-03641 CVE-2026-4194 · GHSA-j98c-59p5-f6gq

D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control

MEDIUM 64

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.05094 Published 2026-03-15 No fix listed CWE-266

TI-2026-03654 CVE-2026-4207 · GHSA-fvc6-2v8r-w926

D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection

MEDIUM 59

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.06264 Published 2026-03-16 No fix listed CWE-74

TI-2026-03653 CVE-2026-4206 · GHSA-gp95-m45p-wjpx

D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

MEDIUM 59

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05373 Published 2026-03-16 No fix listed CWE-74

TI-2026-03652 CVE-2026-4205 · GHSA-wfg7-892m-79mq

D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection

MEDIUM 59

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03999 Published 2026-03-16 No fix listed CWE-74

TI-2026-03651 CVE-2026-4204 · GHSA-qw5q-chr6-cv59

D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection

MEDIUM 59

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03959 Published 2026-03-16 No fix listed CWE-74

Open these records in search →

Critical	457
High	851
Medium	393
Low	6
No CVSS	0