Dlink Dir 820L vulnerabilities
15 vulnerabilities
Known vulnerabilities in Dlink Dir 820L, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-45382dlinkdir-810l_firmware+5KEV
EPSS score97.84%
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.CVE-2015-1187dlinkdir-626l_firmware+14KEVEPSS score82.86%
The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.CVE-2025-52079dlinkdir-820l_firmwareEPSS score0.54%
The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp.CVE-2022-26258dlinkdir-820l_firmwareKEVEPSS score91.63%
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.CVE-2022-34973dlinkdir-820l_firmwareEPSS score15.52%
D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.CVE-2024-51186dlinkdir-820l_firmwareEPSS score2.08%
D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4 and ping_v6 functions.CVE-2024-48150dlinkdir-820l_firmwareEPSS score0.71%
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.CVE-2023-25281dlinkdir-820l_firmwareEPSS score1.07%
A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp.CVE-2023-25280dlinkdir-820l_firmwareKEVEPSS score97.86%
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.CVE-2023-25279dlinkdir-820l_firmwareEPSS score30.99%
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.CVE-2023-25283dlinkdir-820l_firmwareEPSS score1.18%
A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp.CVE-2023-25282dlinkdir-820l_firmwareEPSS score1.04%
A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.CVE-2023-44807dlinkdir-820l_firmwareEPSS score1.31%
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.CVE-2023-44808dlinkdir-820l_firmwareEPSS score1.08%
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.CVE-2023-44809dlinkdir-820l_firmwareEPSS score1.07%
D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.