DIR878

CVEs (53)

• CVE-2022-37130CriAug 31, 2022
  Dlink

  DIR-816
  risk 0.66cvss 9.8epss 0.27

  In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met, setnum will be spliced into v10 by snprintf, and the system will be executed, resulting in a command injection vulnerability

• CVE-2026-90693CriSep 14, 2026
  Dlink

  DIR878
  risk 0.64cvss 9.9epss 0.01

  A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible.

• CVE-2026-90692CriSep 14, 2026
  Amalll Sec

  Router Vulnerability Research
  risk 0.64cvss 9.9epss 0.01

  A vulnerability was detected in D-Link DIR-878 120B05. This affects the function SetDynamicDNSIPv6Settings of the component Dynamic DNS IPv6 Settings. The manipulation of the argument IPv6Address/Hostname results in stack-based buffer overflow. The attack may be launched…

• CVE-2023-27720CriApr 9, 2023
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

• CVE-2023-27719CriApr 9, 2023
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

• CVE-2023-27718CriApr 9, 2023
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

• CVE-2023-24800CriApr 7, 2023
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

• CVE-2023-24799CriApr 7, 2023
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

• CVE-2023-24798CriApr 7, 2023
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.

• CVE-2022-48108CriJan 27, 2023
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.03

  D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload.

• CVE-2022-48107CriJan 27, 2023
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.03

  D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This vulnerability allows attackers to escalate privileges to root via a crafted payload.

• CVE-2022-44801CriNov 22, 2022
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control.

• CVE-2022-44202CriNov 22, 2022
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.01

  D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.

• CVE-2022-43184CriOct 19, 2022
  Dlink

  DIR878
  risk 0.64cvss 9.8epss 0.02

  D-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi.

• CVE-2021-44882CriFeb 4, 2022
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.05

  D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

• CVE-2021-44880CriFeb 4, 2022
  Dlink

  Dir 882 Firmware
  risk 0.64cvss 9.8epss 0.04

  D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request.

• CVE-2021-30072CriApr 2, 2021
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.01

  An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication.

• CVE-2020-8864HigMar 23, 2020
  Dlink

  DIR-867
  risk 0.64cvss 8.8epss 0.80

  This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the…

• CVE-2019-9125CriFeb 25, 2019
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.03

  An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.

• CVE-2019-9124CriFeb 25, 2019
  Dlink

  Dir878 Firmware
  risk 0.64cvss 9.8epss 0.02

  An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.