← Back

D Link

d-link

112 CVEs • 127 products

Products (127)

Click to collapse
Toggle
Dsl 3782 Firmware
dsl-3782_firmware
7 CVEs
Dir 823g Firmware
dir-823g_firmware
5 CVEs
Dir 822 Firmware
dir-822_firmware
5 CVEs
Di 604
di-604
4 CVEs
Di 614+
di-614+
3 CVEs
Dsl G604t
dsl-g604t
3 CVEs
Dsl G624t
dsl-g624t
3 CVEs
Dir 818l(w) Firmware
dir-818l(w)_firmware
3 CVEs
Dir 615 Firmware
dir-615_firmware
3 CVEs
Dvg N5402sp Firmware
dvg-n5402sp_firmware
3 CVEs
Dnr 326 Firmware
dnr-326_firmware
3 CVEs
Dns 327l Firmware
dns-327l_firmware
3 CVEs
Dir 620 Firmware
dir-620_firmware
3 CVEs
Dcs 825l Firmware
dcs-825l_firmware
3 CVEs
Dir 878 Firmware
dir-878_firmware
3 CVEs
Dl 704
dl-704
2 CVEs
Dwl 1000ap
dwl-1000ap
2 CVEs
Di 804
di-804
2 CVEs
Dwl 900ap+
dwl-900ap+
2 CVEs
Di 784
di-784
2 CVEs
Dph 540
dph-540
2 CVEs
Dph 541
dph-541
2 CVEs
Dap 2253 Firmware
dap_2253_firmware
2 CVEs
Dap 2253
dap_2253
2 CVEs
Dcs 2103 Hd Cube Network Camera Firmware
dcs-2103_hd_cube_network_camera_firmware
2 CVEs
Dir 880l Firmware
dir-880l_firmware
2 CVEs
Dir 600m Firmware
dir-600m_firmware
2 CVEs
Dns 322l Firmware
dns-322l_firmware
2 CVEs
Dns 320l Firmware
dns-320l_firmware
2 CVEs
Dir 130 Firmware
dir-130_firmware
2 CVEs
Dir 330 Firmware
dir-330_firmware
2 CVEs
Dir 816 A2 Firmware
dir-816_a2_firmware
2 CVEs
Dir 550a Firmware
dir-550a_firmware
2 CVEs
Dir 604m Firmware
dir-604m_firmware
2 CVEs
Dir 809 A1 Firmware
dir-809_a1_firmware
2 CVEs
Dir 809 A2 Firmware
dir-809_a2_firmware
2 CVEs
Dir 809 Guestzone Firmware
dir-809_guestzone_firmware
2 CVEs
Dir 619l Firmware
dir-619l_firmware
2 CVEs
Dir 605l Firmware
dir-605l_firmware
2 CVEs
Dir 868l Firmware
dir-868l_firmware
2 CVEs
Dvg G5402sp Firmware
dvg-g5402sp_firmware
2 CVEs
Dp 303
dp-303
1 CVE
Di 624
di-624
1 CVE
Dcs 900 Internet Camera
dcs-900_internet_camera
1 CVE
Di 704p
di-704p
1 CVE
Dsl 502t
dsl-502t
1 CVE
Dsl 504t
dsl-504t
1 CVE
Dsl 562t
dsl-562t
1 CVE
Di 524
di-524
1 CVE
Dwl G700ap
dwl-g700ap
1 CVE
Dsa 3100 Airspot Gateway
dsa-3100_airspot_gateway
1 CVE
Dwl 2100ap
dwl-2100ap
1 CVE
Di 604 Broadband Router
di-604_broadband_router
1 CVE
Ebr 2310 Ethernet Broadband Router
ebr-2310_ethernet_broadband_router
1 CVE
Wbr 1310 Wireless G Router
wbr-1310_wireless_g_router
1 CVE
Wbr 2310 Rangebooster G Router
wbr-2310_rangebooster_g_router
1 CVE
Dwl G132
dwl-g132
1 CVE
Dwl 2000ap+
dwl-2000ap+
1 CVE
Tftp Server
tftp_server
1 CVE
Dir 100
dir-100
1 CVE
Mpeg4 Shm Audio Control
mpeg4_shm_audio_control
1 CVE
Dir 400
dir-400
1 CVE
Dkvm Ip8
dkvm-ip8
1 CVE
Dir 655 Firmware
dir-655_firmware
1 CVE
Dir 655
dir-655
1 CVE
Dir 850l Firmare
dir-850l_firmare
1 CVE
Dir 895l Firmware
dir-895l_firmware
1 CVE
Dir 817l(w) Firmware
dir-817l(w)_firmware
1 CVE
Dir 890l Firmware
dir-890l_firmware
1 CVE
Dir 823 Firmware
dir-823_firmware
1 CVE
Dir 885l Firmware
dir-885l_firmware
1 CVE
Di 524 Firmware
di-524_firmware
1 CVE
Dap 1353 H/w B1 Firmware
dap-1353_h/w_b1_firmware
1 CVE
Dap 2553 H/w A1 Firmware
dap-2553_h/w_a1_firmware
1 CVE
Dap 3520 H/w A1 Firmware
dap-3520_h/w_a1_firmware
1 CVE
Dns 325 Firmware
dns-325_firmware
1 CVE
Dns 345 Firmware
dns-345_firmware
1 CVE
Dns 320b Firmware
dns-320b_firmware
1 CVE
Dns 320lw Firmware
dns-320lw_firmware
1 CVE
Dnr 320l Firmware
dnr-320l_firmware
1 CVE
Dir 600l Firmware
dir-600l_firmware
1 CVE
Dcs 936l
dcs-936l
1 CVE
Dsl 2540u Firmware
dsl-2540u_firmware
1 CVE
Dsl 2640u Firmware
dsl-2640u_firmware
1 CVE
Dir 600m C1 Firmware
dir-600m_c1_firmware
1 CVE
Mydlink+
mydlink+
1 CVE
Dir 615 T1 Firmware
dir-615_t1_firmware
1 CVE
Dir 629 B Firmware
dir-629-b_firmware
1 CVE
Dir 885l/r Firmware
dir-885l/r_firmware
1 CVE
Dir 895l/r Firmware
dir-895l/r_firmware
1 CVE
Dir 846 Firmware
dir-846_firmware
1 CVE
Dsl 2640t Firmware
dsl-2640t_firmware
1 CVE
Dcs 936l Firmware
dcs-936l_firmware
1 CVE
Dcs 8000lh Firmware
dcs-8000lh_firmware
1 CVE
Dcs 942lb1 Firmware
dcs-942lb1_firmware
1 CVE
Dcs 5222l Firmware
dcs-5222l_firmware
1 CVE
Dcs 2630l Firmware
dcs-2630l_firmware
1 CVE
Dcs 820l Firmware
dcs-820l_firmware
1 CVE
Dcs 855l Firmware
dcs-855l_firmware
1 CVE
Dcs 2121 Firmware
dcs-2121_firmware
1 CVE

CVEs (112)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-7858
1D Link
1Dnr 326 Firmware
May 13, 2026
Aug 25, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
CVE-2014-7857
1D Link
7Dnr 326 Firmware
Dns 320b FirmwareDns 320l Firmware+4 more
May 13, 2026
Aug 25, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and lo...Show more
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin.Show less
CVE-2017-10676
1D Link
1Dir 600m Firmware
May 13, 2026
Jul 20, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
CVE-2017-9542
1D Link
1Dir 615 Firmware
May 13, 2026
Jun 11, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows...Show more
D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue occurs because it fails to validate the password field. Successful exploitation of this issue allows an attacker to take control of the affected device.Show less
CVE-2015-7247
1D Link
1Dvg N5402sp Firmware
May 13, 2026
Apr 24, 2017
N/A· v4
9.8 CRITICAL· v3
7.8 HIGH· v2
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows...Show more
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (super and admin) in plaintext when running a configuration backup, which allows remote attackers to obtain sensitive information.Show less
CVE-2015-7246
1D Link
1Dvg N5402sp Firmware
May 13, 2026
Apr 24, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative ac...Show more
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access.Show less
CVE-2015-7245
1D Link
1Dvg N5402sp Firmware
May 13, 2026
Apr 24, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read sensitive information via a .. (dot dot) in the errorpage parameter.
CVE-2016-1559
1D Link
3Dap 1353 H/w B1 Firmware
Dap 2553 H/w A1 FirmwareDap 3520 H/w A1 Firmware
May 13, 2026
Apr 21, 2017
N/A· v4
8.1 HIGH· v3
2.6 LOW· v2
D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP...Show more
D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP.Show less
CVE-2017-7398
1D Link
1Dir 615 Firmware
May 13, 2026
Apr 4, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authentic...Show more
D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or changing the hiddenSSID parameter, SSID parameter, or a security-option password.Show less
CVE-2017-5874
1D Link
1Dir 600m Firmware
May 13, 2026
Mar 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.
CVE-2017-5633
1D Link
1Di 524 Firmware
May 13, 2026
Mar 6, 2017
N/A· v4
8.0 HIGH· v3
8.5 HIGH· v2
Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unsp...Show more
Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to (1) change the admin password, (2) reboot the device, or (3) possibly have unspecified other impact via crafted requests to CGI programs.Show less
CVE-2016-5681
2D Link
Dlink
10Dir 817l(w) Firmware
Dir 818l(w) FirmwareDir 822 Firmware+7 more
May 6, 2026
Aug 25, 2016
N/A· v4
9.8 CRITICAL· v3
9.3 HIGH· v2
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.1...Show more
Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.00WWb05, DIR-895L A1 1.11 before 1.11WWb04, DIR-890L A1 1.09 before 1.09b14, DIR-885L A1 1.11 before 1.11WWb07, DIR-880L A1 1.07 before 1.07WWb08, DIR-868L B1 2.03 before 2.03WWb01, and DIR-868L C1 3.00 before 3.00WWb01 devices allows remote attackers to execute arbitrary code via a long session cookie.Show less
CVE-2014-9518
1D Link
2Dir 655
Dir 655 Firmware
May 6, 2026
Jan 5, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in login.cgi in D-Link router DIR-655 (rev Bx) with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the html_response_page parameter.
CVE-2014-9238
1D Link
1Dcs 2103 Hd Cube Network Camera Firmware
May 6, 2026
Dec 3, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / (forward slash) character.
CVE-2014-9234
1D Link
1Dcs 2103 Hd Cube Network Camera Firmware
May 6, 2026
Dec 3, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVE-2013-7321
1D Link
2Dap 2253
Dap 2253 Firmware
Apr 29, 2026
Feb 6, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-7320
1D Link
2Dap 2253
Dap 2253 Firmware
Apr 29, 2026
Feb 6, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configur...Show more
Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors.Show less
CVE-2010-2293
1D Link
1Di 604
Apr 29, 2026
Jun 15, 2010
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.
CVE-2010-2292
1D Link
1Di 604
Apr 29, 2026
Jun 15, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.
CVE-2010-0936
1D Link
1Dkvm Ip8
Apr 29, 2026
Mar 8, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.