Dir 820l Firmware

dir-820l_firmware

Vendor: Dlink • 15 CVEs

CVEs (15)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-52079 1Dlink 1Dir 820l Firmware Jun 17, 2026 Oct 21, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp.
CVE-2024-51186 1Dlink 1Dir 820l Firmware Jun 17, 2026 Nov 11, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4 and ping_v6 functions.
CVE-2024-48150 1Dlink 1Dir 820l Firmware Jun 17, 2026 Oct 14, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.
CVE-2023-44809 1Dlink 1Dir 820l Firmware Jun 17, 2026 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.
CVE-2023-44808 1Dlink 1Dir 820l Firmware Jun 17, 2026 Oct 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.
CVE-2023-44807 1Dlink 1Dir 820l Firmware Jun 17, 2026 Oct 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.
CVE-2023-25281 1Dlink 1Dir 820l Firmware Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp.
CVE-2023-25280 1Dlink 1Dir 820l Firmware Jun 17, 2026 Mar 16, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.
CVE-2023-25282 1Dlink 1Dir 820l Firmware Jun 17, 2026 Mar 15, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.
CVE-2023-25279 1Dlink 1Dir 820l Firmware Jun 17, 2026 Mar 13, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.
CVE-2023-25283 1Dlink 1Dir 820l Firmware Jun 17, 2026 Mar 13, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp.
CVE-2022-34973 1Dlink 1Dir 820l Firmware Jun 17, 2026 Aug 3, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.
CVE-2022-26258 1Dlink 1Dir 820l Firmware Jul 9, 2026 Mar 28, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
CVE-2021-45382 1Dlink 6Dir 810l Firmware Dir 820l FirmwareDir 820lw Firmware+3 more Jun 17, 2026 Feb 17, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L...Show more A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.Show less
CVE-2015-1187 2Dlink Trendnet 15Dir 626l Firmware Dir 636l FirmwareDir 651 Firmware+12 more Apr 21, 2026 Sep 21, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.