İçeriğe atla
Noroxi

dlink kayıtları

dlink üreticisine ait 1.777 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
28 · %1,6
Silahlaştırılmış
45 · %2,5
Pre-auth RCE
425
Düzeltme kaydı olan
%0,2
Yayından KEV’e ortanca
954 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

1.777 kayıt
  • CVE-2024-3273
    99Hemen

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    dlink · dns-320l firmware3 Nis 2024

  • CVE-2019-16920
    99Hemen

    Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    dlink · dir-655 firmware27 Eyl 2019

  • CVE-2014-8361
    99Hemen

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploi

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    realtek · realtek sdk1 May 2015

  • CVE-2020-25506
    99Hemen

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    dlink · dns-320 firmware2 Şub 2021

  • CVE-2024-3272
    98Hemen

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    dlink · dns-320l firmware3 Nis 2024

  • CVE-2023-25280
    98Hemen

    OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with t

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    dlink · dir-820l firmware15 Mar 2023

  • CVE-2021-45382
    98Hemen

    A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    dlink · dir-820l firmware17 Şub 2022

  • CVE-2018-6530
    98Hemen

    OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    dlink · dir-860l firmware6 Mar 2018

  • CVE-2022-26258
    97Hemen

    D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    dlink · dir-820l firmware27 Mar 2022

  • CVE-2019-17621
    96Hemen

    The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to exec

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    dlink · dir-859 firmware30 Ara 2019

  • CVE-2019-16057
    95Hemen

    The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86

    dlink · dns-320 firmware16 Eyl 2019

  • CVE-2015-2051
    94Hemen

    The D-Link DIR-645 Wired/Wireless Router Rev.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %97

    dlink · dir-645 firmware23 Şub 2015

  • CVE-2015-1187
    94Hemen

    The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.c

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83

    trendnet · tew-731br firmware21 Eyl 2017

  • CVE-2024-0769
    94Hemen

    D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %83

    dlink · dir-859 firmware21 Oca 2024

  • CVE-2019-20500
    90Hemen

    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality i

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %97

    dlink · dwl-2600ap firmware5 Mar 2020

  • CVE-2020-25078
    89Hemen

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %98

    dlink · dcs-4603 firmware2 Eyl 2020

  • CVE-2016-20017
    88Hemen

    D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wil

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %64

    dlink · dsl-2750b firmware19 Eki 2022

  • CVE-2021-40655
    86Hemen

    An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %87

    dlink · dir-605l firmware24 Eyl 2021

  • CVE-2022-37055
    86Hemen

    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %56

    dlink · go-rt-ac750 firmware28 Ağu 2022

  • CVE-2020-29557
    85Hemen

    An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %54

    dlink · dir-825 r1 firmware29 Oca 2021

  • CVE-2025-29635
    84Hemen

    A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %88

    dlink · dir-823x firmware25 Mar 2025

  • CVE-2020-25079
    81Hemen

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %54

    dlink · dcs-4703e firmware2 Eyl 2020

  • CVE-2016-11021
    79Bu hafta

    setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand para

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %69

    dlink · dcs-930l firmware8 Mar 2020

  • CVE-2014-100005
    75Bu hafta

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev.

    YüksekCVSS 8,0KEVSilahlaştırılmışEPSS %43

    dlink · dir-600 firmware13 Oca 2015

  • CVE-2022-40799
    75Bu hafta

    Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %34

    dlink · dnr-322l firmware29 Kas 2022