Dsp W215 Firmware

dsp-w215_firmware

Vendor: Dlink • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-125117 1Dlink 1Dsp W215 Firmware Sep 23, 2025 Jul 25, 2025 9.3 CRITICAL· v4 9.8 CRITICAL· v3 N/A· v2 A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi e...Show more A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with system-level privileges.Show less
CVE-2021-29295 1Dlink 1Dsp W215 Firmware Jun 17, 2026 Aug 10, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL i...Show more Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patchedShow less
CVE-2020-13136 1Dlink 1Dsp W215 Firmware Jun 17, 2026 May 18, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.
CVE-2020-13135 1Dlink 1Dsp W215 Firmware Jun 17, 2026 May 18, 2020 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy.
CVE-2014-3936 1Dlink 6Dir 505l Shareport Mobile Companion Dir505 Shareport Mobile CompanionDir505 Shareport Mobile Companion Firmware+3 more May 6, 2026 Jun 2, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allo...Show more Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a GetDeviceSettings action in an HNAP request.Show less