Skip to content
Noroxi

D-Link records

115 published records for vendor d-link.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 0.9%
Pre-auth RCE
22
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

115 records
  • CVE-2018-19300
    61This week

    On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version

    CriticalCVSS 9.8No exploitEPSS 74%

    d-link · dap-1530 firmwareApr 11, 2019

  • CVE-2017-3191
    58Plan

    D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.

    CriticalCVSS 9.8No exploitEPSS 63%

    d-link · dir-130 firmwareDec 15, 2017

  • CVE-2007-1435
    53Plan

    Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request

    CriticalCVSS 10.0WeaponizedEPSS 43%

    d-link · tftp serverMar 13, 2007

  • CVE-2018-19986
    51Plan

    In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B

    CriticalCVSS 9.8No exploitEPSS 42%

    d-link · dir-818lw firmwareMay 13, 2019

  • CVE-2021-26709
    51Plan

    D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to

    CriticalCVSS 9.8No exploitEPSS 40%

    d-link · dsl-320b-d1Apr 7, 2021

  • CVE-2017-3192
    51Plan

    D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.

    CriticalCVSS 9.8No exploitEPSS 39%

    d-link · dir-130 firmwareDec 15, 2017

  • CVE-2018-5371
    48Plan

    diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticat

    HighCVSS 8.8No exploitEPSS 42%

    d-link · dsl-2540u firmwareJan 12, 2018

  • CVE-2014-7859
    45Plan

    Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-32

    CriticalCVSS 9.8No exploitEPSS 21%

    d-link · dns-322l firmwareAug 25, 2017

  • CVE-2015-7245
    44Plan

    Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read

    HighCVSS 7.5Proof of conceptEPSS 45%

    d-link · dvg-n5402sp firmwareApr 24, 2017

  • CVE-2014-7857
    44Plan

    D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05

    CriticalCVSS 9.8No exploitEPSS 15%

    d-link · dns-322l firmwareAug 25, 2017

  • CVE-2014-7858
    44Plan

    The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the u

    CriticalCVSS 9.8No exploitEPSS 15%

    d-link · dnr-326 firmwareAug 25, 2017

  • CVE-2015-7246
    43Plan

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    d-link · dvg-n5402sp firmwareApr 24, 2017

  • CVE-2018-19987
    43Plan

    D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA,

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    d-link · dir-818lw firmwareMay 13, 2019

  • CVE-2019-7297
    43Plan

    An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.

    CriticalCVSS 9.8No exploitEPSS 12%

    d-link · dir-823g firmwareJan 31, 2019

  • CVE-2016-5681
    43Plan

    Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR

    CriticalCVSS 9.8No exploitEPSS 12%

    d-link · dir-880l firmwareAug 25, 2016

  • CVE-2015-7247
    42Plan

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    d-link · dvg-n5402sp firmwareApr 24, 2017

  • CVE-2006-6055
    42Plan

    Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code

    CriticalCVSS 10.0Proof of conceptEPSS 6%

    d-link · dwl-g132Nov 21, 2006

  • CVE-2018-19988
    41Plan

    In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-

    CriticalCVSS 9.8No exploitEPSS 7%

    d-link · dir-868l firmwareMay 13, 2019

  • CVE-2018-20056
    41Plan

    An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices.

    CriticalCVSS 9.8No exploitEPSS 7%

    d-link · dir-619l firmwareDec 11, 2018

  • CVE-2018-11013
    41Plan

    Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 (CN) routers with firmware version 1.10B05 allows u

    CriticalCVSS 9.8No exploitEPSS 6%

    d-link · dir-816 a2 firmwareMay 13, 2018

  • CVE-2018-19989
    41Plan

    In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DI

    CriticalCVSS 9.8No exploitEPSS 6%

    d-link · dir-822 firmwareMay 13, 2019

  • CVE-2018-19990
    41Plan

    In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devic

    CriticalCVSS 9.8No exploitEPSS 5%

    d-link · dir-822 firmwareMay 13, 2019

  • CVE-2018-10996
    41Plan

    The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of ser

    CriticalCVSS 9.8No exploitEPSS 5%

    d-link · dir-629-b firmwareMay 12, 2018

  • CVE-2017-9542
    41Plan

    D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi.

    CriticalCVSS 9.8No exploitEPSS 5%

    d-link · dir-615 firmwareJun 11, 2017

  • CVE-2009-3347
    41Plan

    Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstr

    CriticalCVSS 10.0No exploitEPSS 4%

    d-link · dir-400Sep 24, 2009