Latest Dlink Vulnerabilities

● CVE-2024-3273
D-Link Multiple NAS Devices Command Injection Vulnerability
D-Link Multiple NAS Devices
Dlink Dns-320l Firmware
Dlink Dns-320l
Dlink Dns-120 Firmware
Dlink Dns-120
Dlink Dnr-202l Firmware
and 35 more
● CVE-2024-3272
D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability
D-Link Multiple NAS Devices
Dlink Dns-320l Firmware
Dlink Dns-320l
Dlink Dns-120 Firmware
Dlink Dns-120
Dlink Dnr-202l Firmware
and 35 more
● CVE-2024-24321
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.
Dlink Dir-816 Firmware=1.10cnb05
Dlink DIR-816=a2
● CVE-2024-22853
D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session.
Dlink Go-rt-ac750 Firmware=101b03
Dlink Go-rt-ac750
● CVE-2024-22852
D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to enable telnet service via a specially crafted pa...
Dlink Go-rt-ac750 Firmware=101b03
Dlink Go-rt-ac750
● CVE-2024-0921
D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection
=1.10cnb04
● CVE-2024-23625
D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability
Dlink Dap-1650 Firmware
Dlink Dap-1650
● CVE-2024-23624
D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability
Dlink Dap-1650 Firmware
Dlink Dap-1650
● CVE-2024-22651
There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.
Dlink Dir-815 Firmware<=1.04
Dlink Dir-815
● CVE-2024-22751
D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function.
Dlink Dir-882 A1 Firmware=1.30b06
Dlink Dir-882 A1
● CVE-2024-0769
D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
=1.06-beta1
● CVE-2024-0717
D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure
<=2024-01-12
<=2024-01-12
<=2024-01-12
and 82 more
● CVE-2024-22916
In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stack overflow.
Dlink Go-rt-ac750 Firmware=101b03
Dlink Go-rt-ac750
● CVE-2023-51987
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords.
Dlink Dir-822 Firmware=1.0.2
Dlink Dir-822
● CVE-2023-51984
D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell.
Dlink Dir-822 Firmware=1.0.2
Dlink Dir-822
● CVE-2023-51989
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords.
Dlink Dir-822 Firmware=1.0.2
Dlink Dir-822
● CVE-2023-41603
D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently...
Dlink R15 Firmware<=1.08.02
Dlink R15
● CVE-2023-51123
An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin b...
Dlink Dir-815 Firmware=1.01ssb08.bin
Dlink Dir-815
● CVE-2023-7163
D-Link D-View 8 Unauthenticated Probe-Core Server Communication
Dlink D-view 8=2.0.2.89
● CVE-2023-49004
An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.
Dlink Dir-850l Firmware=fw223wwb01
Dlink Dir-850l=b1
● CVE-2023-6581
D-Link DAR-7000 workidajax.php sql injection
<=2023-11-26
● CVE-2023-6580
D-Link DIR-846 QoS POST deserialization
=100a53dbr
● CVE-2023-48842
D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.
Dlink Go-rt-ac750 Firmware=101b03
Dlink Go-rt-ac750=revision_a
● CVE-2023-42406
Dlink Dar-7000 Firmware=31r02b1413c
Dlink Dar-7000
● CVE-2023-46033
** UNSUPPORTED WHEN ASSIGNED ** D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log ...
Dlink Dsl-2730u Firmware
Dlink Dsl-2730u
Dlink Dsl-2750u Firmware
Dlink Dsl-2750u
● CVE-2023-44694
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.
Dlink Dar-7000 Firmware=v31r02b1413c
Dlink Dar-7000
● CVE-2023-44693
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.
Dlink Dar-7000 Firmware=v31r02b1413c
Dlink Dar-7000
● CVE-2023-45579
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45580
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45578
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45576
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45577
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45572
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 22 more
● CVE-2023-45573
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45574
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-720...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-45575
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200...
Dlink Di-7003g Firmware<=23.08.25d1
Dlink Di-7003g=v2.d1
Dlink Di-7100g\+ Firmware<=23.08.23d1
Dlink Di-7100g\+=v2.d1
Dlink Di-7100g Firmware<=23.08.23d1
Dlink Di-7100g=v2.d1
and 8 more
● CVE-2023-44808
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.
Dlink Dir-820l Firmware=1.05b03
Dlink Dir-820l
● CVE-2023-44809
D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.
Dlink Dir-820l Firmware=1.05b03
Dlink Dir-820l
● CVE-2023-43960
An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.
Dlink Dph-400se Firmware=2.2.15.8
DLINK DPH-400SE
● CVE-2023-45208
A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repeater) to run shell com...
Dlink Dap-1860 Firmware=1.00
Dlink Dap-1860 Firmware=1.01b05-01
Dlink Dap-1860 Firmware=1.01b94
Dlink Dap-1860
● CVE-2023-44959
An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page.
Dlink Dsl-3782 Firmware<=1.03
Dlink Dsl-3782
● CVE-2023-44807
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.
Dlink Dir-820l Firmware=1.05b03
Dlink Dir-820l
● CVE-2023-44839
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function. This vulnerability allows attackers to cause a Denial of Serv...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44838
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44837
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (DoS...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44835
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service (D...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44832
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function. This vulnerability allows attackers to cause a Denial of Service (D...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44830
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Servic...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44831
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function. This vulnerability allows attackers to cause a Denial of Service (D...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1
● CVE-2023-44829
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function. This vulnerability allows attackers to cause a Denial of Serv...
Dlink Dir-823g Firmware=1.0.2b05
Dlink Dir-823g=a1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203