Vulnerabilities

TI-2024-37873 CVE-2024-57376 · GHSA-99gg-h722-7qw4

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N…

MEDIUM 46

Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0373 Published 2025-01-28 No fix listed CWE-120

TI-2020-15768 CVE-2020-25759 · GHSA-p2hx-qx96-fvxr

An issue was discovered on D-Link DSR-250 3.17 devices.

MEDIUM 42

An issue was discovered on D-Link DSR-250 3.17 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02303 Published 2020-12-15 No fix listed CWE-20

TI-2020-15767 CVE-2020-25758 · GHSA-cfw4-vhm2-m225

An issue was discovered on D-Link DSR-250 3.17 devices.

MEDIUM 41

An issue was discovered on D-Link DSR-250 3.17 devices.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01251 Published 2020-12-15 No fix listed CWE-354

TI-2020-15766 CVE-2020-25757 · GHSA-7374-8xfw-v758

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may…

MEDIUM 42

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02133 Published 2020-12-15 No fix listed CWE-20

TI-2020-16200 CVE-2020-26567 · GHSA-fwxh-8jc9-j26p

An issue was discovered on D-Link DSR-250N before 3.17B devices.

MEDIUM 41

An issue was discovered on D-Link DSR-250N before 3.17B devices.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.15765 Published 2020-10-08 No fix listed CWE-306

TI-2012-05332 CVE-2012-6614 · GHSA-4x5r-v8g2-7qhv

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain…

LOW 38

D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03411 Published 2020-02-19 No fix listed CWE-862

TI-2013-05068 CVE-2013-5945 · GHSA-h4fc-4px4-xq89

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44…

MEDIUM 54

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09783 Published 2020-02-11 No fix listed CWE-89

TI-2012-05331 CVE-2012-6613 · GHSA-xvh8-g3fx-684w

D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of…

LOW 36

D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02043 Published 2020-01-25 No fix listed

TI-2013-05758 CVE-2013-7005 · GHSA-859c-w96r-58jw

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

LOW 23

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores ac…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00659 Published 2013-12-19 No fix listed CWE-200

TI-2013-05757 CVE-2013-7004 · GHSA-rrmc-jw5p-mf7q

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

LOW 38

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a ha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01878 Published 2013-12-19 No fix listed CWE-255

TI-2013-05069 CVE-2013-5946 · GHSA-9wg5-5pjg-62hf

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before…

MEDIUM 52

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and D…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06516 Published 2013-12-19 No fix listed CWE-78

Vulnerabilities

Filters