Vulnerabilities

TI-2018-07373 CVE-2018-10431 · GHSA-2m58-mxxr-fwgc

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the…

LOW 37

D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02649 Published 2018-04-26 No fix listed CWE-78

TI-2017-06945 CVE-2017-9542 · GHSA-87p8-v7c2-7pr3

MEDIUM 50

D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05073 Published 2017-06-11 No fix listed CWE-287

TI-2017-05052 CVE-2017-7398 · GHSA-42pv-rvjf-mxph

MEDIUM 44

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03006 Published 2017-04-04 No fix listed CWE-352