Vulnerabilities

TI-2025-32474 CVE-2025-52079 · GHSA-cxww-jr72-74cv

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access…

MEDIUM 41

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00541 Published 2025-10-21 No fix listed CWE-284

TI-2024-34274 CVE-2024-51186 · GHSA-6r2c-554q-5q54

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE)…

HIGH 70

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4 and ping_v6 functions.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02085 Published 2024-11-11 No fix listed CWE-77

TI-2024-32287 CVE-2024-48150 · GHSA-5g3x-vvf6-gwg2

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.

HIGH 82

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2024-10-14 No fix listed CWE-120

TI-2023-24005 CVE-2023-44809 · GHSA-7vm7-mp89-q7c7

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.

MEDIUM 51

D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01073 Published 2023-10-16 No fix listed CWE-269

TI-2023-24004 CVE-2023-44808 · GHSA-f96p-9v3g-ffm4

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.

MEDIUM 51

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01078 Published 2023-10-16 No fix listed CWE-787

TI-2023-24003 CVE-2023-44807 · GHSA-7c2x-2g8f-m6gf

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.

MEDIUM 51

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01309 Published 2023-10-06 No fix listed CWE-787

TI-2023-10694 CVE-2023-25281 · GHSA-jr5x-2rg7-r3xc

A stack overflow vulnerability exists in pingV4Msg component in D-Link…

HIGH 68

A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01073 Published 2023-03-16 No fix listed CWE-787

TI-2023-10693 CVE-2023-25280 · GHSA-3pm3-vpvc-2wpp

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to…

CRITICAL 100KEV

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.97864 Published 2023-03-16 No fix listed CWE-78

TI-2023-10695 CVE-2023-25282 · GHSA-9v8c-fhq7-pr7w

A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a…

MEDIUM 62

A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01045 Published 2023-03-15 No fix listed CWE-787

TI-2023-10696 CVE-2023-25283 · GHSA-9qm7-j7mp-35jq

A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a…

HIGH 72

A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01179 Published 2023-03-13 No fix listed CWE-787

TI-2023-10692 CVE-2023-25279 · GHSA-vgrw-gggp-4wx3

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to…

HIGH 82

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30987 Published 2023-03-13 No fix listed CWE-78

TI-2022-15738 CVE-2022-34973 · GHSA-v99x-xq5q-m649

D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.

MEDIUM 49

D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15521 Published 2022-08-03 No fix listed CWE-120

TI-2022-09657 CVE-2022-26258 · GHSA-qf97-3r3x-x56v

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE)…

CRITICAL 100KEV

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.91632 Published 2022-03-27 No fix listed CWE-78

TI-2021-20503 CVE-2021-45382 · GHSA-5wgx-qvpv-2353

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link…

CRITICAL 100KEV

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.97836 Published 2022-02-17 No fix listed CWE-78

TI-2015-01070 CVE-2015-1187 · GHSA-2cvq-m957-r86c

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute…

CRITICAL 100KEV

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82685 Published 2017-09-21 No fix listed CWE-287

Vulnerabilities

Filters