Vulnerabilities

TI-2025-03870 CVE-2025-4341 · GHSA-8p6x-2w5r-wvv8

D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

MEDIUM 57

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.24017 Published 2025-05-06 No fix listed CWE-74

TI-2020-17641 CVE-2020-29322 · GHSA-9v84-5wgx-22rg

Insufficiently protected credentials in D-Link Router DIR-880L

LOW 36

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01711 Published 2021-06-04 No fix listed CWE-522

TI-2019-14574 CVE-2019-20213 · GHSA-c2wf-4gpc-mpwc

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure…

LOW 37

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2020-01-02 No fix listed CWE-74

TI-2019-13149 CVE-2019-17621 · GHSA-4cjx-47hq-7hc2

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01…

CRITICAL 100KEV

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE reque…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.90615 Published 2019-12-30 No fix listed CWE-78

TI-2017-10971 CVE-2017-14948 · GHSA-6447-8xgh-93jm

Certain D-Link products are affected by: Buffer Overflow.

MEDIUM 50

Certain D-Link products are affected by: Buffer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04929 Published 2019-10-14 No fix listed CWE-120

TI-2018-14680 CVE-2018-20675 · GHSA-w25v-hrr2-2v78

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A*…

MEDIUM 46

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01835 Published 2019-01-09 No fix listed CWE-287

TI-2018-14679 CVE-2018-20674 · GHSA-xh8m-9gqq-4g7c

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A*…

MEDIUM 43

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command e…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02534 Published 2019-01-09 No fix listed

TI-2016-05627 CVE-2016-6563 · GHSA-2237-8cw9-xj7q

D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

HIGH 82

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.79735 Published 2018-07-13 No fix listed CWE-121

TI-2018-04810 CVE-2018-6530 · GHSA-j95f-33m4-87jf

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link…

CRITICAL 100KEV

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_R…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96682 Published 2018-03-06 No fix listed CWE-78

Vulnerabilities

Filters