DIR845L A1
by Dlink
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-38557 | Cri | 0.64 | 9.8 | 0.01 | Aug 28, 2022 | D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh. | ||
| CVE-2022-36755 | Cri | 0.64 | 9.8 | 0.01 | Aug 28, 2022 | D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php. | ||
| CVE-2024-33110 | Cri | 0.59 | 9.1 | 0.01 | May 6, 2024 | D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component. | ||
| CVE-2024-29385 | Cri | 0.59 | 9.0 | 0.02 | Mar 22, 2024 | DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function. | ||
| CVE-2024-29366 | Hig | 0.57 | 8.8 | 0.02 | Mar 22, 2024 | A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03. | ||
| CVE-2024-33112 | Hig | 0.49 | 7.5 | 0.06 | May 6, 2024 | D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func. | ||
| CVE-2024-33113 | Med | 0.35 | 5.3 | 0.03 | May 6, 2024 | D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php. | ||
| CVE-2024-33111 | Med | 0.35 | 5.4 | 0.01 | May 6, 2024 | D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php. |
- risk 0.64cvss 9.8epss 0.01
D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.
- risk 0.64cvss 9.8epss 0.01
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
- risk 0.59cvss 9.1epss 0.01
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component.
- risk 0.59cvss 9.0epss 0.02
DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function.
- risk 0.57cvss 8.8epss 0.02
A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03.
- risk 0.49cvss 7.5epss 0.06
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.
- risk 0.35cvss 5.3epss 0.03
D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.
- risk 0.35cvss 5.4epss 0.01
D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.