Dir 816 Firmware

dir-816_firmware

Vendor: Dlink • 73 CVEs

CVEs (73)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-29321 1Dlink 1Dir 816 Firmware Jun 17, 2026 May 10, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.
CVE-2022-28915 1Dlink 1Dir 816 Firmware Jun 17, 2026 May 10, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm.
CVE-2021-31326 1Dlink 1Dir 816 Firmware Jun 17, 2026 Mar 24, 2022 N/A· v4 9.8 CRITICAL· v3 9.0 HIGH· v2 D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi.
CVE-2021-39510 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 24, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string t...Show more An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.Show less
CVE-2021-39509 1Dlink 1Dir 816 Firmware Jun 17, 2026 Aug 24, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to d...Show more An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.Show less
CVE-2021-27114 1Dlink 1Dir 816 Firmware Jun 17, 2026 Apr 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer O...Show more An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the"'s_ip" and "s_mac" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address.Show less
CVE-2021-27113 1Dlink 1Dir 816 Firmware Jun 17, 2026 Apr 14, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Inje...Show more An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters.Show less
CVE-2021-26810 1Dlink 1Dir 816 Firmware Jun 17, 2026 Mar 30, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to...Show more D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser parameter.Show less
CVE-2019-7642 1Dlink 5Dir 816 Firmware Dir 816l FirmwareDir 817lw Firmware+2 more Jun 17, 2026 Mar 25, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited t...Show more D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), DIR-816L (B1-2.06), DIR-816 (B1-2.06?), DIR-850L (A1-1.09), and DIR-868L (A1-1.10).Show less
CVE-2019-10042 1Dlink 1Dir 816 Firmware Jun 17, 2026 Mar 25, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router witho...Show more The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication.Show less
CVE-2019-10041 1Dlink 1Dir 816 Firmware Jun 17, 2026 Mar 25, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system accoun...Show more The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication.Show less
CVE-2019-10040 1Dlink 1Dir 816 Firmware Jun 17, 2026 Mar 25, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system comma...Show more The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication.Show less
CVE-2019-10039 1Dlink 1Dir 816 Firmware Jun 17, 2026 Mar 25, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account w...Show more The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication.Show less

Previous 1 2 34