dlink Vulnerability Advisory Catalog

Total 1,698 security vulnerabilities recorded for dlink software and firmware.

← Back to All Vendors
CVE-2024-7436 MEDIUM
Component: di-8100_firmware

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file ms...

📅 2024-08-03
CVSS 6.3 Dossier →
CVE-2024-7357 MEDIUM
Component: dir-600_firmware

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function...

📅 2024-08-01
CVSS 6.3 Dossier →
CVE-2024-41611 CRITICAL
Component: dir-860l_firmware

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Teln...

📅 2024-07-30
CVSS 9.8 Dossier →
CVE-2024-41610 CRITICAL
Component: dir-820lw_firmware

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Te...

📅 2024-07-30
CVSS 9.8 Dossier →
CVE-2024-38438 CRITICAL
Component: dsl-225_firmware

D-Link - CWE-294: Authentication Bypass by Capture-replay...

📅 2024-07-21
CVSS 9.8 Dossier →
CVE-2024-38437 CRITICAL
Component: dsl-225_firmware

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

📅 2024-07-21
CVSS 9.8 Dossier →
CVE-2024-39962 CRITICAL
Component: dir-823x_firmware

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (RCE) vulnerability in the ntp_...

📅 2024-07-19
CVSS 9.8 Dossier →
CVE-2024-40505 CRITICAL
Component: dap-1650_firmware

Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component....

📅 2024-07-16
CVSS 9.3 Dossier →
Component: dir-823x_ax3000_firmware

D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution (RCE) vulnerability via the dhcpd_startip parameter at /goform/...

📅 2024-07-08
CVSS 8.8 Dossier →
Component: dar-7000_firmware

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue ...

📅 2024-07-05
CVSS 2.7 Dossier →
Component: dir-1950_firmware

D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow atta...

📅 2024-06-27
CVSS 6.8 Dossier →
Component: dir-605l_firmware

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root....

📅 2024-06-13
CVSS 8.8 Dossier →
Component: di-7003g_firmware

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service....

📅 2024-05-28
CVSS 5.7 Dossier →
Component: d-view_8

D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar...

📅 2024-05-23
CVSS 8.8 Dossier →
Component: d-view_8

D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers ...

📅 2024-05-23
CVSS 8.8 Dossier →
Component: d-view_8

D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co...

📅 2024-05-23
CVSS 8.8 Dossier →
CVE-2024-5296 CRITICAL
Component: d-view_8

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentica...

📅 2024-05-23
CVSS 9.8 Dossier →
Component: g416_firmware

D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrar...

📅 2024-05-23
CVSS 8.8 Dossier →
CVE-2024-5294 MEDIUM
Component: dir-3040_firmware

D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to crea...

📅 2024-05-23
CVSS 6.5 Dossier →
Component: dir-2640_firmware

D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to ...

📅 2024-05-23
CVSS 8.8 Dossier →
Component: network_assistant

D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escal...

📅 2024-05-23
CVSS 7.8 Dossier →
Component: dir-2150_firmware

D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t...

📅 2024-05-23
CVSS 8.8 Dossier →
CVE-2024-4965 MEDIUM
Component: dar-7000_firmware

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unkno...

📅 2024-05-16
CVSS 6.3 Dossier →
CVE-2024-4964 MEDIUM
Component: dar-7000_firmware

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affec...

📅 2024-05-16
CVSS 6.3 Dossier →
Page 29 of 71 (1,698 Total Records)