Vulnerabilities > Dlink

DATE CVE VULNERABILITY TITLE RISK
2023-10-16 CVE-2023-45574 Out-of-bounds Write vulnerability in Dlink products
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the fn parameter of the file.data function.
network
low complexity
dlink CWE-787
critical
9.8
2023-10-16 CVE-2023-45575 Out-of-bounds Write vulnerability in Dlink products
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and before allows a remote attacker to execute arbitrary code via the ip parameter of the ip_position.asp function.
network
low complexity
dlink CWE-787
critical
9.8
2023-10-11 CVE-2023-43960 Improper Privilege Management vulnerability in Dlink Dph-400Se Firmware 2.2.15.8
An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component.
network
low complexity
dlink CWE-269
8.8
2023-10-10 CVE-2023-45208 Command Injection vulnerability in Dlink Dap-1860 Firmware 1.00/1.01B0501/1.01B94
A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repeater) to run shell commands as root during the setup process of the repeater, via a crafted SSID.
low complexity
dlink CWE-77
8.8
2023-10-10 CVE-2023-44959 Command Injection vulnerability in Dlink Dsl-3782 Firmware 1.01/1.03
An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page.
network
low complexity
dlink CWE-77
8.8
2023-10-06 CVE-2023-44807 Out-of-bounds Write vulnerability in Dlink Dir-820L Firmware 1.05B03
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.
network
low complexity
dlink CWE-787
critical
9.8
2023-10-05 CVE-2023-43284 Unspecified vulnerability in Dlink Dir-846 Firmware 100A53Dbr
D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter.
network
low complexity
dlink
8.8
2023-10-05 CVE-2023-44828 Classic Buffer Overflow vulnerability in Dlink Dir-823G Firmware 1.0.2B05
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings function.
network
low complexity
dlink CWE-120
7.5
2023-10-05 CVE-2023-44829 Classic Buffer Overflow vulnerability in Dlink Dir-823G Firmware 1.0.2B05
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function.
network
low complexity
dlink CWE-120
7.5
2023-10-05 CVE-2023-44830 Classic Buffer Overflow vulnerability in Dlink Dir-823G Firmware 1.0.2B05
D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function.
network
low complexity
dlink CWE-120
7.5