Read the docs

D-Link Japan K.K.

Records1707All Threatist records
Exploited (KEV)28In CISA KEV
CVSS critical457CVSS 9.0–10.0
CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV
TI-2025-21151 D-Link DIR-823X Command Injection Vulnerability Priority CRITICAL 91KEV 2026-04-24TI-2022-17249 D-Link Routers Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2025-12-08TI-2020-15334 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability Priority CRITICAL 90KEV 2025-08-05TI-2020-15335 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability Priority CRITICAL 97KEV 2025-08-05TI-2022-19407 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability Priority CRITICAL 97KEV 2025-08-05TI-2024-00708 D-Link DIR-859 Router Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-06-25

Components

Products in the NVD configurations · select one to filter the records
Dir-816 Firmware 73 records HIGH Dir-605l Firmware 65 records CRITICAL Dir-619l Firmware 65 records CRITICAL Dir-823g Firmware 59 records HIGH Dap-2622 Firmware 54 records MEDIUM Dns-320 Firmware 52 records CRITICAL Dir-513 Firmware 47 records HIGH Dns-320lw Firmware 45 records CRITICAL

Records

8 records in Dsr-500n Firmware · all components

TI-2013-05068 CVE-2013-5945 · GHSA-h4fc-4px4-xq89

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44…

Priority MEDIUM 54

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09783 Published 2020-02-11 No fix listed CWE-89
TI-2013-05069 CVE-2013-5946 · GHSA-9wg5-5pjg-62hf

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before…

Priority MEDIUM 52

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and D…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06516 Published 2013-12-19 No fix listed CWE-78
TI-2021-16856 CVE-2021-39615 · GHSA-849p-5hj4-w47q

D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user…

Priority MEDIUM 46

D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02196 Published 2021-08-23 No fix listed CWE-798
TI-2020-15766 CVE-2020-25757 · GHSA-7374-8xfw-v758

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may…

Priority MEDIUM 42

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02133 Published 2020-12-15 No fix listed CWE-20
TI-2013-05757 CVE-2013-7004 · GHSA-rrmc-jw5p-mf7q

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

Priority LOW 38

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a ha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01878 Published 2013-12-19 No fix listed CWE-255
TI-2013-05758 CVE-2013-7005 · GHSA-859c-w96r-58jw

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

Priority LOW 23

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores ac…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00659 Published 2013-12-19 No fix listed CWE-200
Open these records in search →