Dlink vulnerabilities
1,697 vulnerabilities
Known vulnerabilities in Dlink products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 454 products.
Products
50 of 454- Dir 81673 vulnerabilities
- Dir 619L65 vulnerabilities
- Dir 605L63 vulnerabilities
- Dir 823G59 vulnerabilities
- Dap 262254 vulnerabilities
- Dns 32049 vulnerabilities
- Dir 51347 vulnerabilities
- Dns 34343 vulnerabilities
- Dnr 202L42 vulnerabilities
- Dnr 32642 vulnerabilities
- Dns 1100 442 vulnerabilities
- Dns 12042 vulnerabilities
- Dns 1200 0542 vulnerabilities
- Dns 1550 0442 vulnerabilities
- Dns 315L42 vulnerabilities
- Dns 320L42 vulnerabilities
- Dns 320Lw42 vulnerabilities
- Dns 32142 vulnerabilities
- Dns 32342 vulnerabilities
- Dns 32542 vulnerabilities
- Dns 32642 vulnerabilities
- Dns 327L42 vulnerabilities
- Dns 340L42 vulnerabilities
- Dns 34542 vulnerabilities
- Dns 726 442 vulnerabilities
- Dir 823X39 vulnerabilities
- Dir 87839 vulnerabilities
- Dap 132537 vulnerabilities
- Di 800335 vulnerabilities
- Dir 600L34 vulnerabilities
- Dir 88231 vulnerabilities
- Di 810027 vulnerabilities
- Dir 850L27 vulnerabilities
- Dir 304025 vulnerabilities
- Dir 61524 vulnerabilities
- Dar 700023 vulnerabilities
- Dir X326023 vulnerabilities
- Dns 322L22 vulnerabilities
- Dwr M96022 vulnerabilities
- Di 7003G21 vulnerabilities
- Dnr 322L21 vulnerabilities
- G41621 vulnerabilities
- Dir 868L20 vulnerabilities
- D View 819 vulnerabilities
- Dir 82519 vulnerabilities
- Dap 202018 vulnerabilities
- Dcs 113018 vulnerabilities
- Dir 215017 vulnerabilities
- Dsl 378217 vulnerabilities
- Dap 136016 vulnerabilities
CVE-2018-16605dlinkdir-600m_firmware
EPSS score0.90%
D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.CVE-2018-19987d-linkdir-818l\(w\)_firmware+6EPSS score12.93%
D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable /HNAP1/SetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.CVE-2018-19989d-linkdir-822_firmware+1EPSS score5.54%
In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php source code, the uplink parameter is saved in the /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth internal configuration memory without any regex checking. And in the bwc_tc_spq_start, bwc_tc_wfq_start, and bwc_tc_adb_start functions of the bwcsvcs.php source code, the data in /bwc/entry:1/bandwidth and /bwc/entry:2/bandwidth is used with the tc command without any regex checking. A vulnerable /HNAP1/SetQoSSettings XML message could have shell metacharacters in the uplink element such as the `telnetd` string.CVE-2018-19300d-linkdap-1530_firmware+8EPSS score74.28%
On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well.CVE-2018-20432dlinkcovr-2600r_firmware+1EPSS score3.93%
D-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet connection, which allows unauthenticated attackers to gain privileged access to the router, and to extract sensitive data or modify the configuration.CVE-2018-20674dlinkdir-822_firmware+3EPSS score2.53%
D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.CVE-2018-20445dlinkdcm-604_firmware+1EPSS score1.91%
D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests.CVE-2018-20114dlinkdir-818l\(w\)_firmware+1EPSS score6.73%
On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-6530.CVE-2018-20675dlinkdir-822_firmware+3EPSS score1.84%
D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.CVE-2018-9284dlinksingapore_starhub_firmwareEPSS score4.61%
authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code.CVE-2018-9032dlinkdir-850l_firmwareEPSS score27.68%
An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php or /folder_view.php.CVE-2018-17440dlinkcentral_wifimanagerEPSS score38.47%
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcoded credentials (admin, admin). Taking advantage of this, a remote unauthenticated attacker could execute arbitrary PHP code by uploading any file in the web root directory and then accessing it via a request.CVE-2018-17443dlinkcentral_wifimanagerEPSS score5.66%
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateSite endpoint is vulnerable to stored XSS.CVE-2018-17064dlinkdir-816_a2_firmwareEPSS score7.38%
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command injection via the syslogIp parameter after /goform/clearlog is invoked.CVE-2018-17066dlinkdir-816_a2_firmwareEPSS score7.26%
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter.CVE-2018-17063dlinkdir-816_a2_firmwareEPSS score4.14%
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/NTPSyncWithHost route. This could lead to command injection via shell metacharacters.CVE-2018-17067dlinkdir-816_a2_firmwareEPSS score1.89%
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address.CVE-2018-17441dlinkcentral_wifimanagerEPSS score5.66%
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.CVE-2018-17989dlinkdsl-3782_firmwareEPSS score0.83%
A stored XSS vulnerability exists in the web interface on D-Link DSL-3782 devices with firmware 1.01 that allows authenticated attackers to inject a JavaScript or HTML payload inside the ACL page. The injected payload would be executed in a user's browser when "/cgi-bin/New_GUI/Acl.asp" is requested.CVE-2018-17442dlinkcentral_wifimanagerEPSS score14.22%
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerability in the onUploadLogPic endpoint allows remote authenticated users to execute arbitrary PHP code.