Dsr 250n Firmware

dsr-250n_firmware

Vendor: Dlink • 11 CVEs

CVEs (11)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-57376 1Dlink 6Dsr 1000n Firmware Dsr 150 FirmwareDsr 150n Firmware+3 more Jun 17, 2026 Jan 28, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.
CVE-2020-25759 1Dlink 10Dsr 1000 Firmware Dsr 1000ac FirmwareDsr 1000n Firmware+7 more Jun 17, 2026 Dec 15, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation...Show more An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.Show less
CVE-2020-25758 1Dlink 10Dsr 1000 Firmware Dsr 1000ac FirmwareDsr 1000n Firmware+7 more Jun 17, 2026 Dec 15, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations b...Show more An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.Show less
CVE-2020-25757 1Dlink 10Dsr 1000 Firmware Dsr 1000ac FirmwareDsr 1000n Firmware+7 more Jun 17, 2026 Dec 15, 2020 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This...Show more A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.Show less
CVE-2020-26567 1Dlink 1Dsr 250n Firmware Jun 17, 2026 Oct 8, 2020 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access reboots the device, rendering it therefore unusable for several m...Show more An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access reboots the device, rendering it therefore unusable for several minutes.Show less
CVE-2012-6614 1Dlink 1Dsr 250n Firmware Nov 21, 2024 Feb 19, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.
CVE-2013-5945 1Dlink 8Dsr 1000 Firmware Dsr 1000n FirmwareDsr 150 Firmware+5 more Nov 21, 2024 Feb 11, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-10...Show more Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary SQL commands via the password to (1) the login.authenticate function in share/lua/5.1/teamf1lualib/login.lua or (2) captivePortal.lua.Show less
CVE-2012-6613 1Dlink 1Dsr 250n Firmware Nov 21, 2024 Jan 25, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 D-Link DSR-250N devices with firmware 1.05B73_WW allow Persistent Root Access because of the admin password for the admin account.
CVE-2013-7005 1Dlink 15Dsr 1000 Dsr 1000 FirmwareDsr 1000n+12 more Apr 29, 2026 Dec 19, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores ac...Show more D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii.Show less
CVE-2013-7004 1Dlink 15Dsr 1000 Dsr 1000 FirmwareDsr 1000n+12 more Apr 29, 2026 Dec 19, 2013 N/A· v4 N/A· v3 7.8 HIGH· v2 D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a ha...Show more D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a hardcoded account of username gkJ9232xXyruTRmY, which makes it easier for remote attackers to obtain access by leveraging knowledge of the username.Show less
CVE-2013-5946 1Dlink 15Dsr 1000 Dsr 1000 FirmwareDsr 1000n+12 more Apr 29, 2026 Dec 19, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and D...Show more The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) "Ping or Trace an IP Address" or (2) "Perform a DNS Lookup" section.Show less