Vulnerabilities

TI-2024-37873 CVE-2024-57376 · GHSA-99gg-h722-7qw4

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N…

MEDIUM 46

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0373 Published 2025-01-28 No fix listed CWE-120

TI-2020-13414 CVE-2020-18568 · GHSA-pgpr-gp52-wcw9

The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection…

MEDIUM 58

The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15155 Published 2021-02-02 No fix listed CWE-78

TI-2020-15768 CVE-2020-25759 · GHSA-p2hx-qx96-fvxr

An issue was discovered on D-Link DSR-250 3.17 devices.

MEDIUM 42

An issue was discovered on D-Link DSR-250 3.17 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02303 Published 2020-12-15 No fix listed CWE-20

TI-2020-15767 CVE-2020-25758 · GHSA-cfw4-vhm2-m225

An issue was discovered on D-Link DSR-250 3.17 devices.

MEDIUM 41

An issue was discovered on D-Link DSR-250 3.17 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01251 Published 2020-12-15 No fix listed CWE-354

TI-2020-15766 CVE-2020-25757 · GHSA-7374-8xfw-v758

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may…

MEDIUM 42

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02133 Published 2020-12-15 No fix listed CWE-20

TI-2013-05068 CVE-2013-5945 · GHSA-h4fc-4px4-xq89

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44…

MEDIUM 54

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09783 Published 2020-02-11 No fix listed CWE-89

TI-2013-05758 CVE-2013-7005 · GHSA-859c-w96r-58jw

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

LOW 23

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores ac…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00659 Published 2013-12-19 No fix listed CWE-200

TI-2013-05757 CVE-2013-7004 · GHSA-rrmc-jw5p-mf7q

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

LOW 38

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a ha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01878 Published 2013-12-19 No fix listed CWE-255

TI-2013-05069 CVE-2013-5946 · GHSA-9wg5-5pjg-62hf

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before…

MEDIUM 52

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and D…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06516 Published 2013-12-19 No fix listed CWE-78

Vulnerabilities

Filters