Vulnerabilities

TI-2026-12851 CVE-2026-15270 · GHSA-fcxp-r92v-x7h2

D-link DIR-823G Web boa.conf least privilege violation

HIGH 69

A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00852 Published 2026-07-09 No fix listed CWE-266

TI-2026-09921 CVE-2026-11492 · GHSA-rhp9-667x-7qvw

D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

MEDIUM 57

A security flaw has been discovered in D-Link DIR-823G 1.0.2B05.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00511 Published 2026-06-08 No fix listed CWE-266

TI-2026-03640 CVE-2026-4193 · GHSA-4f7r-xrwr-q63x

D-Link DIR-823G goahead UpdateClientInfo access control

MEDIUM 64

A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00801 Published 2026-03-15 No fix listed CWE-266

TI-2025-37752 CVE-2025-60675 · GHSA-9459-cp56-77p3

A command injection vulnerability exists in the D-Link DIR-823G router firmware…

MEDIUM 60

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /tmp/new_qos.rule configuration file.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01474 Published 2025-11-13 No fix listed CWE-77

TI-2025-37748 CVE-2025-60671 · GHSA-566r-rxh9-78f8

A command injection vulnerability exists in the D-Link DIR-823G router firmware…

MEDIUM 60

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.01433 Published 2025-11-13 No fix listed CWE-77

TI-2025-37644 CVE-2025-60332 · GHSA-fr9f-4qrw-2pq5

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1…

HIGH 72

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04952 Published 2025-10-22 No fix listed CWE-476

TI-2025-37643 CVE-2025-60331 · GHSA-cjcf-64r3-cwf2

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the…

HIGH 72

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00622 Published 2025-10-22 No fix listed CWE-121

TI-2025-02075 CVE-2025-2360 · GHSA-9wfr-r3p3-m3fw

D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization

MEDIUM 43

A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.04203 Published 2025-03-17 No fix listed CWE-266

TI-2025-02074 CVE-2025-2359 · GHSA-qvh6-jh7v-8fmr

D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization

HIGH 70

A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.15399 Published 2025-03-17 No fix listed CWE-266

TI-2024-12078 CVE-2024-13030 · GHSA-q7jr-4jmj-7c77

D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control

MEDIUM 40

A vulnerability was found in D-Link DIR-823G 1.0.2B05_20181207.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01959 Published 2024-12-30 No fix listed CWE-266

TI-2024-34212 CVE-2024-51024 · GHSA-hv6q-xm2j-9hqv

D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via…

HIGH 70

D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01423 Published 2024-11-05 No fix listed CWE-78

TI-2024-34211 CVE-2024-51023 · GHSA-c6x8-9hqx-m583

D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via…

HIGH 73

D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01458 Published 2024-11-05 No fix listed CWE-78

TI-2024-29888 CVE-2024-44408 · GHSA-pvxf-38x8-qcmc

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure.

MEDIUM 40

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00628 Published 2024-09-06 No fix listed CWE-200

TI-2024-22028 CVE-2024-33345 · GHSA-4qmm-8p43-6vrx

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main…

LOW 30

D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attackers to cause a Denial of Service (DoS) via a crafted input.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00785 Published 2024-04-29 No fix listed CWE-476

TI-2024-18342 CVE-2024-27662 · GHSA-v9x5-9rj9-j343

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in…

MEDIUM 62

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4().

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00427 Published 2024-02-29 No fix listed CWE-395

TI-2024-18341 CVE-2024-27661 · GHSA-77jp-g8vw-f6xm

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in…

MEDIUM 62

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8().

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00427 Published 2024-02-29 No fix listed CWE-395

TI-2024-18340 CVE-2024-27660 · GHSA-23c2-hg9m-2pw8

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in…

MEDIUM 62

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488().

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00644 Published 2024-02-29 No fix listed CWE-476

TI-2024-18339 CVE-2024-27659 · GHSA-4g2w-rjr9-jccg

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in…

MEDIUM 62

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30().

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00644 Published 2024-02-29 No fix listed CWE-395

TI-2024-18338 CVE-2024-27658 · GHSA-26x5-365c-m568

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in…

MEDIUM 62

D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8().

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00644 Published 2024-02-29 No fix listed CWE-395

TI-2024-18337 CVE-2024-27657 · GHSA-hx98-5v9p-2p84

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the…

HIGH 73

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01205 Published 2024-02-29 No fix listed CWE-121

TI-2024-18336 CVE-2024-27656 · GHSA-x7vm-hc8m-78p7

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie…

HIGH 73

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00617 Published 2024-02-29 No fix listed CWE-121

TI-2024-18335 CVE-2024-27655 · GHSA-x5hf-p447-47mj

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the…

HIGH 73

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01216 Published 2024-02-29 No fix listed CWE-121

TI-2023-24024 CVE-2023-44839 · GHSA-qccj-536p-x9c6

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the…

MEDIUM 50

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08866 Published 2023-10-05 No fix listed CWE-120

TI-2023-24023 CVE-2023-44838 · GHSA-w986-f5mv-7h98

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower…

MEDIUM 41

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01034 Published 2023-10-05 No fix listed CWE-120

TI-2023-24022 CVE-2023-44837 · GHSA-wprf-5vfh-42w4

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password…

MEDIUM 41

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01034 Published 2023-10-05 No fix listed CWE-120

Vulnerabilities

Filters