Dlink Dir 850L vulnerabilities, page 2
27 vulnerabilities
Known vulnerabilities in Dlink Dir 850L, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-14426dlinkdir-850l_firmware
EPSS score0.34%
D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow (aka the /etc/shadow symlink target) permissions.CVE-2017-14419dlinkdir-850l_firmwareEPSS score0.83%
The D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices, participates in mydlink Cloud Services by establishing a TCP relay service for HTTP, even though a TCP relay service for HTTPS is also established.CVE-2017-14423dlinkdir-850l_firmwareEPSS score1.01%
htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which makes it easier for remote attackers to change the DNS configuration via a series of requests.CVE-2017-14414dlinkdir-850l_firmwareEPSS score1.13%
D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/shareport.php.CVE-2017-3193d-linkdir-850l and potentially others+1EPSS score5.61%
Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service.CVE-2019-7642dlinkdir-816_firmware+4EPSS score2.60%
D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).CVE-2023-49004dlinkdir-850l_firmwareEPSS score1.86%
An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.