D-Link kayıtları
d-link üreticisine ait 115 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %0,9
- Pre-auth RCE
- 22
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')14
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer12
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12
- CWE-287 Improper Authentication7
- CWE-352 Cross-Site Request Forgery (CSRF)6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor5
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
115 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
61Bu hafta | CVE-2018-19300İstismar yok | On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware versiond-link · dap-1530 firmware · CWE-20 | Kritik9,8 | — | %74,3 | 11 Nis 2019 |
58Planlayın | CVE-2017-3191İstismar yok | D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.d-link · dir-130 firmware · CWE-294 | Kritik9,8 | — | %62,5 | 15 Ara 2017 |
53Planlayın | CVE-2007-1435Silahlaştırılmış | Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT requestd-link · tftp server | Kritik10,0 | — | %42,8 | 13 Mar 2007 |
51Planlayın | CVE-2018-19986İstismar yok | In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.Bd-link · dir-818lw firmware · CWE-78 | Kritik9,8 | — | %41,6 | 13 May 2019 |
51Planlayın | CVE-2021-26709İstismar yok | D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers tod-link · dsl-320b-d1 · CWE-787 | Kritik9,8 | — | %40,1 | 7 Nis 2021 |
51Planlayın | CVE-2017-3192İstismar yok | D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.d-link · dir-130 firmware · CWE-522 | Kritik9,8 | — | %39,5 | 15 Ara 2017 |
48Planlayın | CVE-2018-5371İstismar yok | diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticatd-link · dsl-2540u firmware · CWE-78 | Yüksek8,8 | — | %42,0 | 12 Oca 2018 |
45Planlayın | CVE-2014-7859İstismar yok | Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-32d-link · dns-322l firmware · CWE-119 | Kritik9,8 | — | %20,9 | 25 Ağu 2017 |
44Planlayın | CVE-2015-7245Kavram kanıtı | Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read d-link · dvg-n5402sp firmware · CWE-22 | Yüksek7,5 | — | %45,5 | 24 Nis 2017 |
44Planlayın | CVE-2014-7857İstismar yok | D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05d-link · dns-322l firmware · CWE-287 | Kritik9,8 | — | %15,2 | 25 Ağu 2017 |
44Planlayın | CVE-2014-7858İstismar yok | The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the ud-link · dnr-326 firmware · CWE-287 | Kritik9,8 | — | %15,2 | 25 Ağu 2017 |
43Planlayın | CVE-2015-7246Kavram kanıtı | D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the twd-link · dvg-n5402sp firmware · CWE-798 | Kritik9,8 | — | %14,3 | 24 Nis 2017 |
43Planlayın | CVE-2018-19987Kavram kanıtı | D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, d-link · dir-818lw firmware · CWE-78 | Kritik9,8 | — | %12,9 | 13 May 2019 |
43Planlayın | CVE-2019-7297İstismar yok | An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.d-link · dir-823g firmware · CWE-78 | Kritik9,8 | — | %12,5 | 31 Oca 2019 |
43Planlayın | CVE-2016-5681İstismar yok | Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIRd-link · dir-880l firmware · CWE-119 | Kritik9,8 | — | %11,9 | 25 Ağu 2016 |
42Planlayın | CVE-2015-7247Kavram kanıtı | D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes d-link · dvg-n5402sp firmware · CWE-200 | Kritik9,8 | — | %10,2 | 24 Nis 2017 |
42Planlayın | CVE-2006-6055Kavram kanıtı | Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary coded-link · dwl-g132 | Kritik10,0 | — | %5,9 | 21 Kas 2006 |
41Planlayın | CVE-2018-19988İstismar yok | In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-d-link · dir-868l firmware · CWE-78 | Kritik9,8 | — | %7,4 | 13 May 2019 |
41Planlayın | CVE-2018-20056İstismar yok | An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices.d-link · dir-619l firmware · CWE-787 | Kritik9,8 | — | %7,0 | 11 Ara 2018 |
41Planlayın | CVE-2018-11013İstismar yok | Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows ud-link · dir-816 a2 firmware · CWE-787 | Kritik9,8 | — | %6,4 | 13 May 2018 |
41Planlayın | CVE-2018-19989İstismar yok | In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DId-link · dir-822 firmware · CWE-78 | Kritik9,8 | — | %5,5 | 13 May 2019 |
41Planlayın | CVE-2018-19990İstismar yok | In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devicd-link · dir-822 firmware · CWE-78 | Kritik9,8 | — | %5,3 | 13 May 2019 |
41Planlayın | CVE-2018-10996İstismar yok | The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of serd-link · dir-629-b firmware · CWE-119 | Kritik9,8 | — | %5,1 | 12 May 2018 |
41Planlayın | CVE-2017-9542İstismar yok | D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi.d-link · dir-615 firmware · CWE-287 | Kritik9,8 | — | %5,1 | 11 Haz 2017 |
41Planlayın | CVE-2009-3347İstismar yok | Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrd-link · dir-400 · CWE-119 | Kritik10,0 | — | %4,2 | 24 Eyl 2009 |
- CVE-2018-1930061Bu hafta
On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version
KritikCVSS 9,8İstismar yokEPSS %74d-link · dap-1530 firmware11 Nis 2019
- CVE-2017-319158Planlayın
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.
KritikCVSS 9,8İstismar yokEPSS %63d-link · dir-130 firmware15 Ara 2017
- CVE-2007-143553Planlayın
Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request
KritikCVSS 10,0SilahlaştırılmışEPSS %43d-link · tftp server13 Mar 2007
- CVE-2018-1998651Planlayın
In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B
KritikCVSS 9,8İstismar yokEPSS %42d-link · dir-818lw firmware13 May 2019
- CVE-2021-2670951Planlayın
D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to
KritikCVSS 9,8İstismar yokEPSS %40d-link · dsl-320b-d17 Nis 2021
- CVE-2017-319251Planlayın
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.
KritikCVSS 9,8İstismar yokEPSS %39d-link · dir-130 firmware15 Ara 2017
- CVE-2018-537148Planlayın
diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticat
YüksekCVSS 8,8İstismar yokEPSS %42d-link · dsl-2540u firmware12 Oca 2018
- CVE-2014-785945Planlayın
Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-32
KritikCVSS 9,8İstismar yokEPSS %21d-link · dns-322l firmware25 Ağu 2017
- CVE-2015-724544Planlayın
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read
YüksekCVSS 7,5Kavram kanıtıEPSS %45d-link · dvg-n5402sp firmware24 Nis 2017
- CVE-2014-785744Planlayın
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05
KritikCVSS 9,8İstismar yokEPSS %15d-link · dns-322l firmware25 Ağu 2017
- CVE-2014-785844Planlayın
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the u
KritikCVSS 9,8İstismar yokEPSS %15d-link · dnr-326 firmware25 Ağu 2017
- CVE-2015-724643Planlayın
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw
KritikCVSS 9,8Kavram kanıtıEPSS %14d-link · dvg-n5402sp firmware24 Nis 2017
- CVE-2018-1998743Planlayın
D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA,
KritikCVSS 9,8Kavram kanıtıEPSS %13d-link · dir-818lw firmware13 May 2019
- CVE-2019-729743Planlayın
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.
KritikCVSS 9,8İstismar yokEPSS %12d-link · dir-823g firmware31 Oca 2019
- CVE-2016-568143Planlayın
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR
KritikCVSS 9,8İstismar yokEPSS %12d-link · dir-880l firmware25 Ağu 2016
- CVE-2015-724742Planlayın
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes
KritikCVSS 9,8Kavram kanıtıEPSS %10d-link · dvg-n5402sp firmware24 Nis 2017
- CVE-2006-605542Planlayın
Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code
KritikCVSS 10,0Kavram kanıtıEPSS %6d-link · dwl-g13221 Kas 2006
- CVE-2018-1998841Planlayın
In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-
KritikCVSS 9,8İstismar yokEPSS %7d-link · dir-868l firmware13 May 2019
- CVE-2018-2005641Planlayın
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices.
KritikCVSS 9,8İstismar yokEPSS %7d-link · dir-619l firmware11 Ara 2018
- CVE-2018-1101341Planlayın
Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows u
KritikCVSS 9,8İstismar yokEPSS %6d-link · dir-816 a2 firmware13 May 2018
- CVE-2018-1998941Planlayın
In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DI
KritikCVSS 9,8İstismar yokEPSS %6d-link · dir-822 firmware13 May 2019
- CVE-2018-1999041Planlayın
In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devic
KritikCVSS 9,8İstismar yokEPSS %5d-link · dir-822 firmware13 May 2019
- CVE-2018-1099641Planlayın
The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of ser
KritikCVSS 9,8İstismar yokEPSS %5d-link · dir-629-b firmware12 May 2018
- CVE-2017-954241Planlayın
D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi.
KritikCVSS 9,8İstismar yokEPSS %5d-link · dir-615 firmware11 Haz 2017
- CVE-2009-334741Planlayın
Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstr
KritikCVSS 10,0İstismar yokEPSS %4d-link · dir-40024 Eyl 2009