dlink Vulnerability Advisory Catalog

Total 1,698 security vulnerabilities recorded for dlink software and firmware.

← Back to All Vendors
CVE-2021-33346 CRITICAL
Component: dsl-2888a_firmware

There is an arbitrary password modification vulnerability in a D-LINK DSL-2888A router product. An attacker can use this vulnerability to modify the p...

📅 2021-06-24
CVSS 9.8 Dossier →
Component: dir-2640-us_firmware

D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR-2640) stores the device system account password in p...

📅 2021-06-16
CVSS 6.8 Dossier →
Component: dir-2640-us_firmware

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us), when setting PPPoE, will start quagga process in th...

📅 2021-06-16
CVSS 8.1 Dossier →
Component: dir-2640-us_firmware

D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2...

📅 2021-06-16
CVSS 7.1 Dossier →
Component: dir-2640-us_firmware

There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to adminis...

📅 2021-06-16
CVSS 7.8 Dossier →
Component: dir-895l_mfc_firmware

The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an una...

📅 2021-06-04
CVSS 7.5 Dossier →
Component: dir-885l-mfc_firmware

The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that all...

📅 2021-06-04
CVSS 7.5 Dossier →
Component: dir-880l_firmware

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenti...

📅 2021-06-04
CVSS 7.5 Dossier →
Component: dir-868l_firmware

The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenti...

📅 2021-06-04
CVSS 7.5 Dossier →
Component: dir-842e_firmware

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to...

📅 2021-05-17
CVSS 5.9 Dossier →
CVE-2021-20697 CRITICAL
Component: dap-1880ac_firmware

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an aut...

📅 2021-04-26
CVSS 9.8 Dossier →
Component: dap-1880ac_firmware

DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted re...

📅 2021-04-26
CVSS 8.8 Dossier →
Component: dap-1880ac_firmware

Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attac...

📅 2021-04-26
CVSS 8.8 Dossier →
Component: dap-1880ac_firmware

Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restrict...

📅 2021-04-26
CVSS 8.8 Dossier →
Component: dap-2020_firmware

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi a...

📅 2021-04-14
CVSS 6.5 Dossier →
Component: dap-2020_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access po...

📅 2021-04-14
CVSS 8.8 Dossier →
Component: dap-2020_firmware

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access po...

📅 2021-04-14
CVSS 8.8 Dossier →
CVE-2021-27114 CRITICAL
Component: dir-816_firmware

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry ...

📅 2021-04-14
CVSS 9.8 Dossier →
CVE-2021-27113 CRITICAL
Component: dir-816_firmware

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler fun...

📅 2021-04-14
CVSS 9.8 Dossier →
Component: dir-802_firmware

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker c...

📅 2021-04-12
CVSS 8.8 Dossier →
CVE-2020-27600 CRITICAL
Component: dir-846_firmware

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1_100.26 allows remote attackers to execute arbitrary commands via sh...

📅 2021-04-02
CVSS 9.8 Dossier →
CVE-2021-30072 CRITICAL
Component: dir-878_firmware

An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not...

📅 2021-04-02
CVSS 9.8 Dossier →
CVE-2021-26810 CRITICAL
Component: dir-816_firmware

D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in ...

📅 2021-03-30
CVSS 9.8 Dossier →
Component: dir-841_firmware

/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools)....

📅 2021-03-11
CVSS 8.0 Dossier →
Page 56 of 71 (1,698 Total Records)