d-link Vulnerability Advisory Catalog

Total 106 security vulnerabilities recorded for d-link software and firmware.

← Back to All Vendors
CVE-2022-44929 CRITICAL
Component: dvg-g5402sp_firmware

An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profile...

📅 2022-12-02
CVSS 9.8 Dossier →
CVE-2022-44928 CRITICAL
Component: dvg-g5402sp_firmware

D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function....

📅 2022-12-02
CVSS 9.8 Dossier →
Component: dir-868lw_firmware

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query his...

📅 2021-10-31
CVSS 5.3 Dossier →
CVE-2021-26709 CRITICAL
Component: dsl-320b-d1

D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over...

📅 2021-04-07
CVSS 9.8 Dossier →
CVE-2019-6258 CRITICAL
Component: dir-822_firmware

D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP proto...

📅 2020-08-18
CVSS 9.8 Dossier →
Component: dir-867_firmware

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 router...

📅 2020-07-23
CVSS 8.8 Dossier →
Component: dsl-2640b_firmware

An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-upda...

📅 2020-03-05
CVSS 7.5 Dossier →
Component: dsl6740u_firmware

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authenticati...

📅 2019-11-22
CVSS 8.8 Dossier →
Component: dir-866l_firmware

D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, leading to common injection....

📅 2019-10-16
CVSS 6.1 Dossier →
CVE-2018-19990 CRITICAL
Component: dir-822_firmware

In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In the...

📅 2019-05-13
CVSS 9.8 Dossier →
CVE-2018-19989 CRITICAL
Component: dir-822_firmware

In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev....

📅 2019-05-13
CVSS 9.8 Dossier →
CVE-2018-19988 CRITICAL
Component: dir-868l_firmware

In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.B...

📅 2019-05-13
CVSS 9.8 Dossier →
CVE-2018-19987 CRITICAL
Component: dir-818lw_firmware

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-89...

📅 2019-05-13
CVSS 9.8 Dossier →
CVE-2018-19986 CRITICAL
Component: dir-818lw_firmware

In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR...

📅 2019-05-13
CVSS 9.8 Dossier →
CVE-2018-19300 CRITICAL
Component: dap-1530_firmware

On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, ...

📅 2019-04-11
CVSS 9.8 Dossier →
CVE-2019-9125 CRITICAL
Component: dir-878_firmware

An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does ...

📅 2019-02-25
CVSS 9.8 Dossier →
CVE-2019-9124 CRITICAL
Component: dir-878_firmware

An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password....

📅 2019-02-25
CVSS 9.8 Dossier →
CVE-2019-7297 CRITICAL
Component: dir-823g_firmware

An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitr...

📅 2019-01-31
CVSS 9.8 Dossier →
CVE-2018-20389 CRITICAL
Component: dcm-604_firmware

D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.44...

📅 2018-12-23
CVSS 9.8 Dossier →
Component: dcs-825l_firmware

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. An attacker can harm the dev...

📅 2018-12-20
CVSS 7.5 Dossier →
Component: dcs-936l_firmware

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such...

📅 2018-12-20
CVSS 7.5 Dossier →
CVE-2018-20305 CRITICAL
Component: dir-816_a2_firmware

D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2usercon...

📅 2018-12-20
CVSS 9.8 Dossier →
Component: dir-619l_firmware

An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated u...

📅 2018-12-11
CVSS 8.8 Dossier →
CVE-2018-20056 CRITICAL
Component: dir-619l_firmware

An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. There is a stack-based buffer overflow allowing...

📅 2018-12-11
CVSS 9.8 Dossier →
Page 1 of 5 (106 Total Records)