TI-2025-08272 CVE-2025-9026 · GHSA-f95p-94rw-mjfp
D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection
Priority HIGH 70
A vulnerability was identified in D-Link DIR-860L 2.04.B04.
Vulnerabilities
10 records
TI-2024-25079 CVE-2024-37605 · GHSA-w863-c2hv-xjc5
A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows…
Priority MEDIUM 62
A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
TI-2024-28642 CVE-2024-42812 · GHSA-j6qj-c649-wpqq
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of…
Priority HIGH 82
In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi.
TI-2024-27694 CVE-2024-41611 · GHSA-3ghx-8gmm-9rg3
In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded…
Priority HIGH 82
In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.
TI-2020-15793 CVE-2020-25786 · GHSA-5x8h-xjj6-w38j
webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows…
Priority LOW 29
webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header.
TI-2018-14250 CVE-2018-20114 · GHSA-xjxf-w237-rjjp
On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated…
Priority MEDIUM 52
On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter.
TI-2018-04810 CVE-2018-6530 · GHSA-j95f-33m4-87jf
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link…
Priority CRITICAL 100KEV
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_R…
TI-2018-04809 CVE-2018-6529 · GHSA-xg32-wxx9-5grm
XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L…
Priority LOW 31
XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 a…
TI-2018-04808 CVE-2018-6528 · GHSA-2xpj-rm54-gp8w
XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L…
Priority LOW 31
XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04…
TI-2018-04807 CVE-2018-6527 · GHSA-vvr3-vw4g-8mj8
XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L…
Priority LOW 31
XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW11…