Dir 815 Firmware

dir-815_firmware

Vendor: Dlink • 15 CVEs

CVEs (15)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-25115 1Dlink 7Dir 110 Firmware Dir 412 FirmwareDir 600 Firmware+4 more Sep 24, 2025 Aug 27, 2025 10.0 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to e...Show more Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.Show less
CVE-2025-6328 1Dlink 1Dir 815 Firmware Jun 17, 2026 Jun 20, 2025 7.4 HIGH· v4 8.8 HIGH· v3 9.0 HIGH· v2 A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The at...Show more A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
CVE-2024-22651 1Dlink 1Dir 815 Firmware Jun 17, 2026 Jan 24, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.
CVE-2024-0717 1Dlink 44Dap 1360 Firmware Dir 1210 FirmwareDir 1260 Firmware+41 more Jun 17, 2026 Jan 19, 2024 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825...Show more A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice\|net\|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.Show less
CVE-2023-51123 1Dlink 1Dir 815 Firmware Jun 17, 2026 Jan 10, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.
CVE-2023-37758 1Dlink 1Dir 815 Firmware Jun 17, 2026 Jul 18, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.
CVE-2020-25786 1Dlink 6Dir 645 Firmware Dir 803 FirmwareDir 815 Firmware+3 more Jun 17, 2026 Sep 19, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE...Show more webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer headerShow less
CVE-2018-10108 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 16, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to /htdocs/webinc/js/bsc_sms_inbox.php.
CVE-2018-10107 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 16, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php.
CVE-2018-10106 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 16, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/getcfg.php, as demonstrated by a /getcfg.php?a=%0a_POST_SERVICES...Show more D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/getcfg.php, as demonstrated by a /getcfg.php?a=%0a_POST_SERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZED_GROUP%3D1 request.Show less
CVE-2015-0153 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 12, 2018 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.
CVE-2015-0152 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 12, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.
CVE-2015-0151 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 12, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVE-2015-0150 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 12, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors.
CVE-2014-8888 1Dlink 1Dir 815 Firmware Nov 21, 2024 Apr 12, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue."