← Back

Dir 859 A3 Firmware

dir-859_a3_firmware

Vendor: Dlink • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dlink
1Dir 859 A3 Firmware
May 21, 2025
Feb 18, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post requ...Show more
A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page.Show less
1Dlink
2Dir 859 A3 Firmware
Dir 859 Firmware
Nov 21, 2024
Mar 4, 2022
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.
1Dlink
2Dir 850l A Firmware
Dir 859 A3 Firmware
Nov 21, 2024
Oct 11, 2019
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.