D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

17 records in Dsl-3782 Firmware · all components

TI-2023-24037 CVE-2023-44959 · GHSA-f8p7-256f-9q35

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to…

HIGH 73

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.22834 Published 2023-10-10 No fix listed CWE-77

TI-2025-19169 CVE-2025-25895 · GHSA-7c3w-44gc-m9cf

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the…

HIGH 70

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00959 Published 2025-02-18 No fix listed CWE-78

TI-2025-19168 CVE-2025-25894 · GHSA-rp2h-fxw7-626m

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the…

HIGH 70

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00959 Published 2025-02-18 No fix listed CWE-78

TI-2025-19167 CVE-2025-25893 · GHSA-5pp8-6xcp-c279

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the…

HIGH 70

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00959 Published 2025-02-18 No fix listed CWE-78

TI-2025-19170 CVE-2025-25896 · GHSA-jhhj-7wcm-5fmp

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the…

MEDIUM 59

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.0048 Published 2025-02-18 No fix listed CWE-121

TI-2025-19166 CVE-2025-25892 · GHSA-2jwh-mfm2-mmqg

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip…

MEDIUM 59

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00321 Published 2025-02-18 No fix listed CWE-121

TI-2025-19165 CVE-2025-25891 · GHSA-4w46-7mrq-64vx

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the…

MEDIUM 59

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00321 Published 2025-02-18 No fix listed CWE-121

TI-2024-37701 CVE-2024-56914 · GHSA-3g8x-9wgw-w22x

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /New_GUI/ParentalControl.asp.

MEDIUM 59

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /New_GUI/ParentalControl.asp.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.0031 Published 2025-01-22 No fix listed CWE-120

TI-2018-06437 CVE-2018-8898 · GHSA-cfxc-8f2g-m9vp

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782…

MEDIUM 56

A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT_77616E6771696F6E67") allows unauthenticated attackers to perform a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.12321 Published 2018-05-23 No fix listed CWE-287

TI-2023-11981 CVE-2023-27216 · GHSA-4xm3-rqgm-8558

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute…

MEDIUM 46

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03014 Published 2023-04-12 No fix listed CWE-78

TI-2022-15393 CVE-2022-34527 · GHSA-97pc-8cxv-phmj

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection…

MEDIUM 45

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte_4C0160.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04363 Published 2022-07-29 No fix listed CWE-78

TI-2018-12809 CVE-2018-17990 · GHSA-78cf-4c2v-2mcc

An issue was discovered on D-Link DSL-3782 devices with firmware 1.01.

MEDIUM 45

An issue was discovered on D-Link DSL-3782 devices with firmware 1.01.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04498 Published 2019-04-01 No fix listed CWE-78

TI-2022-15394 CVE-2022-34528 · GHSA-m647-9c3w-cf6j

D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue.

MEDIUM 41

D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01525 Published 2022-07-29 No fix listed CWE-787

TI-2022-15886 CVE-2022-35192 · GHSA-mpw3-gmf9-cxjh

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows…

LOW 35

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to Login.asp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2022-08-25 No fix listed CWE-120

TI-2021-17387 CVE-2021-40284 · GHSA-jp7p-c272-p959

D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a…

LOW 34

D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0263 Published 2021-09-09 No fix listed CWE-120

TI-2022-15885 CVE-2022-35191 · GHSA-33f4-9prw-vfp6

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows…

LOW 31

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01029 Published 2022-08-22 No fix listed CWE-404

TI-2018-12808 CVE-2018-17989 · GHSA-fjwf-g6jm-w4pq

A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with…

LOW 26

A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a JavaScript or HTML payload inside the ACL page.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00826 Published 2019-04-01 No fix listed CWE-79

Open these records in search →