D-Link Japan K.K.

Records1707All Threatist records

Exploited (KEV)28In CISA KEV

CVSS critical457CVSS 9.0–10.0

CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability CRITICAL 91KEV 2026-04-24 TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability CRITICAL 100KEV 2025-12-08 TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability CRITICAL 90KEV 2025-08-05 TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability CRITICAL 97KEV 2025-08-05 TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability CRITICAL 97KEV 2025-08-05 TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records

Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

11 records in Dsr-250n Firmware · all components

TI-2013-05068 CVE-2013-5945 · GHSA-h4fc-4px4-xq89

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44…

MEDIUM 54

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09783 Published 2020-02-11 No fix listed CWE-89

TI-2013-05069 CVE-2013-5946 · GHSA-9wg5-5pjg-62hf

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before…

MEDIUM 52

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and D…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06516 Published 2013-12-19 No fix listed CWE-78

TI-2024-37873 CVE-2024-57376 · GHSA-99gg-h722-7qw4

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N…

MEDIUM 46

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0373 Published 2025-01-28 No fix listed CWE-120

TI-2020-15768 CVE-2020-25759 · GHSA-p2hx-qx96-fvxr

An issue was discovered on D-Link DSR-250 3.17 devices.

MEDIUM 42

An issue was discovered on D-Link DSR-250 3.17 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02303 Published 2020-12-15 No fix listed CWE-20

TI-2020-15766 CVE-2020-25757 · GHSA-7374-8xfw-v758

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may…

MEDIUM 42

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02133 Published 2020-12-15 No fix listed CWE-20

TI-2020-16200 CVE-2020-26567 · GHSA-fwxh-8jc9-j26p

An issue was discovered on D-Link DSR-250N before 3.17B devices.

MEDIUM 41

An issue was discovered on D-Link DSR-250N before 3.17B devices.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.15765 Published 2020-10-08 No fix listed CWE-306

TI-2020-15767 CVE-2020-25758 · GHSA-cfw4-vhm2-m225

An issue was discovered on D-Link DSR-250 3.17 devices.

MEDIUM 41

An issue was discovered on D-Link DSR-250 3.17 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01251 Published 2020-12-15 No fix listed CWE-354

TI-2013-05757 CVE-2013-7004 · GHSA-rrmc-jw5p-mf7q

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

LOW 38

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a ha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01878 Published 2013-12-19 No fix listed CWE-255

TI-2012-05332 CVE-2012-6614 · GHSA-4x5r-v8g2-7qhv

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain…

LOW 38

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03411 Published 2020-02-19 No fix listed CWE-862

TI-2012-05331 CVE-2012-6613 · GHSA-xvh8-g3fx-684w

D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of…

LOW 36

D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02043 Published 2020-01-25 No fix listed

TI-2013-05758 CVE-2013-7005 · GHSA-859c-w96r-58jw

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

LOW 23

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00659 Published 2013-12-19 No fix listed CWE-200

Open these records in search →