VYPR
← Dlink

Vendor CVEs

Dlink

All CVEs

1,936 total · sorted by risk
  • CVE-2023-41226MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to…

  • CVE-2023-41225MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to…

  • CVE-2023-41224MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit…

  • CVE-2023-41223MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to…

  • CVE-2023-41221MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to…

  • CVE-2023-41220MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to…

  • CVE-2023-41219MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit…

  • CVE-2023-41218MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit…

  • CVE-2023-41216MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to…

  • CVE-2023-41222MedMay 3, 2024
    Dlink
    DIR-3040
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit…

  • CVE-2023-32152MedMay 3, 2024
    Dlink
    DIR-2640
    risk 0.44cvss 6.5epss 0.29

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-32151MedMay 3, 2024
    Dlink
    DIR-2640
    risk 0.44cvss 6.8epss 0.02

    D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this…

  • CVE-2023-32148MedMay 3, 2024
    Dlink
    DIR-2640
    risk 0.44cvss 6.5epss 0.29

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerability. The specific…

  • CVE-2023-32147MedMay 3, 2024
    Dlink
    DIR-2640
    risk 0.44cvss 6.8epss 0.02

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploit this…

  • CVE-2023-51631MedMay 2, 2024
    Dlink
    DIR-X3260
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit…

  • CVE-2023-46033MedOct 19, 2023
    Dlink
    Dsl 2730u Firmware
    risk 0.44cvss 6.8epss 0.00

    D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control.

  • CVE-2023-5146MedSep 25, 2023
    Dlink
    DAR-7000
    risk 0.44cvss 6.3epss 0.32

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument file_upload leads to…

  • CVE-2023-5145MedSep 25, 2023
    Dlink
    DAR-7000
    risk 0.44cvss 6.3epss 0.34

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to…

  • CVE-2022-43633MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43632MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43631MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43629MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43628MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43627MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43626MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43625MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43624MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43623MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2022-43619MedMar 29, 2023
    Dlink
    DIR-1935
    risk 0.44cvss 6.8epss 0.01

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw…

  • CVE-2021-46379MedMar 4, 2022
    Dlink
    DIR850
    risk 0.44cvss 6.1epss 0.16

    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.

  • CVE-2021-34204MedJun 16, 2021
    Dlink
    DIR-2640
    risk 0.44cvss 6.8epss 0.01

    D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR-2640) stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all devices are the same, and they cannot be…

  • CVE-2026-90706MedSep 14, 2026
    Dlink
    DWR-M921
    risk 0.43cvss 6.6epss 0.02

    A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly…

  • CVE-2026-90705MedSep 14, 2026
    Dlink
    DWR-M921
    risk 0.43cvss 6.6epss 0.02

    A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed…

  • CVE-2026-90704MedSep 14, 2026
    Dlink
    DWR-M921
    risk 0.43cvss 6.6epss 0.02

    A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit…

  • CVE-2025-60676MedNov 13, 2025
    Dlink
    DIR-878A1
    risk 0.43cvss 6.5epss 0.03

    An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell…

  • CVE-2025-60673MedNov 13, 2025
    Dlink
    DIR-878A1
    risk 0.43cvss 6.5epss 0.04

    An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDMZSettings' functionality, where the 'IPAddress' parameter in prog.cgi is stored in NVRAM and later used by librcm.so to construct…

  • CVE-2025-60672MedNov 13, 2025
    Dlink
    DIR-878A1
    risk 0.43cvss 6.5epss 0.04

    An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later…

  • CVE-2025-12295MedOct 27, 2025
    Dlink
    DAP-2695
    risk 0.43cvss 6.6epss 0.00

    A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks…

  • CVE-2025-55582MedAug 27, 2025
    Dlink
    DCS-825L
    risk 0.43cvss 6.6epss 0.00

    D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries such as `dcp` and `signalc` without verifying integrity, authenticity, or permissions. An attacker with local filesystem access (via physical…

  • CVE-2025-8978MedAug 14, 2025
    Dlink
    DIR-619L
    risk 0.43cvss 6.6epss 0.01

    A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is…

  • CVE-2025-4544MedMay 11, 2025
    Dlink
    DI-8100
    risk 0.43cvss 6.6epss 0.11

    A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_udp_max/def_udp_time/d…

  • CVE-2025-1103MedFeb 7, 2025
    Dlink
    DIR-823x
    risk 0.43cvss 6.5epss 0.14

    A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to…

  • CVE-2024-28728MedNov 12, 2024
    Dlink
    DWR-2000M
    risk 0.43cvss 6.6epss 0.01

    Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to obtain sensitive information via a crafted payload to the WiFi SSID Name field.

  • CVE-2024-8132MedAug 24, 2024
    Dlink
    DNS-120
    risk 0.43cvss 6.3epss 0.23

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It has been classified…

  • CVE-2024-8129MedAug 24, 2024
    Dlink
    DNS-120
    risk 0.43cvss 6.3epss 0.23

    A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to…

  • CVE-2024-7922MedAug 19, 2024
    Dlink
    DNS-120
    risk 0.43cvss 6.3epss 0.19

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and classified as…

  • CVE-2024-7715MedAug 13, 2024
    Dlink
    DNS-320
    risk 0.43cvss 6.3epss 0.25

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to…

  • CVE-2023-5150MedSep 25, 2023
    Dlink
    DAR-7000
    risk 0.43cvss 6.3epss 0.23

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestricted upload. It is…

  • CVE-2023-5149MedSep 25, 2023
    Dlink
    DAR-7000
    risk 0.43cvss 6.3epss 0.21

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to unrestricted…

  • CVE-2023-5148MedSep 25, 2023
    Dlink
    DAR-7000
    risk 0.43cvss 6.3epss 0.31

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload leads to…

Page 30 of 39