D Link Dns 322L vulnerabilities

2 vulnerabilities

Known vulnerabilities in D Link Dns 322L, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2014-7857d-linkdnr-326_firmware+6
EPSS score
15.17%
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin.9.8CVE-2014-7859d-linkdnr-320l_firmware+4
EPSS score
20.88%
Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values.