Dlink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-11021 1Dlink 1Dcs 930l Firmware Nov 5, 2025 Mar 9, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter.
CVE-2020-10216 2Dlink Trendnet 2Dir 825 Firmware Tew 632brp Firmware Jun 17, 2026 Mar 7, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affec...Show more An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.Show less
CVE-2020-10215 2Dlink Trendnet 2Dir 825 Firmware Tew 632brp Firmware Jun 17, 2026 Mar 7, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is al...Show more An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.Show less
CVE-2020-10214 1Dlink 1Dir 825 Firmware Jun 17, 2026 Mar 7, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a suffic...Show more An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_sync.cgi with a sufficiently long parameter ntp_server.Show less
CVE-2020-10213 2Dlink Trendnet 2Dir 825 Firmware Tew 632brp Firmware Jun 17, 2026 Mar 7, 2020 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632B...Show more An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected.Show less
CVE-2019-20501 1Dlink 1Dwl 2600ap Firmware Jun 17, 2026 Mar 5, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade fi...Show more D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell metacharacters in the admin.cgi?action=upgrade firmwareRestore or firmwareServerip parameter.Show less
CVE-2019-20500 1Dlink 1Dwl 2600ap Firmware Jun 17, 2026 Mar 5, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_s...Show more D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_save configBackup or downloadServerip parameter.Show less
CVE-2019-20499 1Dlink 1Dwl 2600ap Firmware Jun 17, 2026 Mar 5, 2020 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=confi...Show more D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=config_restore configRestore or configServerip parameter.Show less
CVE-2019-19226 1Dlink 1Dsl 2680 Firmware Jun 17, 2026 Mar 4, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to enable or disable MAC address filtering by submitting a crafted Forms/WlanMacFilter_1 POS...Show more A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to enable or disable MAC address filtering by submitting a crafted Forms/WlanMacFilter_1 POST request without being authenticated on the admin interface.Show less
CVE-2019-19225 1Dlink 1Dsl 2680 Firmware Jun 17, 2026 Mar 4, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to change DNS servers without being authenticated on the admin interface by submitting a cra...Show more A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to change DNS servers without being authenticated on the admin interface by submitting a crafted Forms/dns_1 POST request.Show less
CVE-2019-19224 1Dlink 1Dsl 2680 Firmware Jun 17, 2026 Mar 4, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to download the configuration (binary file) settings by submitting a rom-0 GET request witho...Show more A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to download the configuration (binary file) settings by submitting a rom-0 GET request without being authenticated on the admin interface.Show less
CVE-2019-19223 1Dlink 1Dsl 2680 Firmware Jun 17, 2026 Mar 4, 2020 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without being authenticated on...Show more A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without being authenticated on the admin interface.Show less
CVE-2019-19222 1Dlink 1Dsl 2680 Firmware Jun 17, 2026 Mar 4, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page by sending a crafted F...Show more A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page by sending a crafted Forms/wireless_autonetwork_1 POST request.Show less
CVE-2020-9535 1Dlink 1Dir 615jx10 Firmware Jun 17, 2026 Mar 2, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup_Wizard webpage parameter when f_radius_ip1 is malformed.
CVE-2020-9534 1Dlink 1Dir 615jx10 Firmware Jun 17, 2026 Mar 2, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed.
CVE-2020-8862 1Dlink 1Dap 2610 Firmware Jun 17, 2026 Feb 22, 2020 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The sp...Show more This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper password checking. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-10082.Show less
CVE-2020-8861 1Dlink 1Dap 1330 Firmware Jun 17, 2026 Feb 22, 2020 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability....Show more This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of cookies. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9554.Show less
CVE-2020-6842 1Dlink 1Dch M225 Firmware Jun 17, 2026 Feb 21, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name.
CVE-2020-6841 1Dlink 1Dch M225 Firmware Jun 17, 2026 Feb 21, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.
CVE-2012-6614 1Dlink 1Dsr 250n Firmware Nov 21, 2024 Feb 19, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 D-Link DSR-250N devices before 1.08B31 allow remote authenticated users to obtain "persistent root access" via the BusyBox CLI, as demonstrated by overwriting the super user password.

Previous 1...707172...86 Next