Dlink Dir 100 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Dlink Dir 100, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-7052dlinkdir-100_firmware
EPSS score24.68%
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi scriptCVE-2013-7054dlinkdir-100_firmwareEPSS score3.50%
D-Link DIR-100 4.03B07: cli.cgi XSSCVE-2013-7053dlinkdir-100_firmwareEPSS score3.38%
D-Link DIR-100 4.03B07: cli.cgi CSRFCVE-2013-7055dlinkdir-100_firmwareEPSS score6.98%
D-Link DIR-100 4.03B07 has PPTP and poe information disclosureCVE-2013-7051dlinkdir-100_firmwareEPSS score15.62%
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parametersCVE-2013-6027dlinkdir-100_firmwareEPSS score4.50%
Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/runtime/diagnostic/pingIp parameter to Tools/tools_misc.xgi.CVE-2013-6026alphanetworksvdsl_asl-55052+12EPSS score7.68%
The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.