Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: D-Link Japan K.K. Component: Dsr-500n Firmware Clear all filters
TI-2021-16856 CVE-2021-39615 · GHSA-849p-5hj4-w47q

D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user…

Priority MEDIUM 46

D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02196 Published 2021-08-23 No fix listed CWE-798
TI-2020-15766 CVE-2020-25757 · GHSA-7374-8xfw-v758

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may…

Priority MEDIUM 42

A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.02133 Published 2020-12-15 No fix listed CWE-20
TI-2013-05068 CVE-2013-5945 · GHSA-h4fc-4px4-xq89

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44…

Priority MEDIUM 54

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-10…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09783 Published 2020-02-11 No fix listed CWE-89
TI-2013-05758 CVE-2013-7005 · GHSA-859c-w96r-58jw

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

Priority LOW 23

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores ac…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00659 Published 2013-12-19 No fix listed CWE-200
TI-2013-05757 CVE-2013-7004 · GHSA-rrmc-jw5p-mf7q

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64…

Priority LOW 38

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a ha…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01878 Published 2013-12-19 No fix listed CWE-255
TI-2013-05069 CVE-2013-5946 · GHSA-9wg5-5pjg-62hf

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before…

Priority MEDIUM 52

The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and D…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06516 Published 2013-12-19 No fix listed CWE-78