Vulnerabilities > Dlink

DATE CVE VULNERABILITY TITLE RISK
2023-06-07 CVE-2023-33781 Unspecified vulnerability in Dlink Dir-842V2 Firmware 1.0.3
An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.
network
low complexity
dlink
8.8
2023-06-07 CVE-2023-33782 Command Injection vulnerability in Dlink Dir-842V2 Firmware 1.0.3
D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.
network
low complexity
dlink CWE-77
8.8
2023-05-31 CVE-2023-33735 Unspecified vulnerability in Dlink Dir-846 Firmware 100A52
D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.
network
low complexity
dlink
critical
9.8
2023-05-23 CVE-2023-31814 Unspecified vulnerability in Dlink Dir-300 Firmware 1.06B05Ww
D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.
network
low complexity
dlink
critical
9.8
2023-05-16 CVE-2023-29961 Out-of-bounds Write vulnerability in Dlink Dir-605L Firmware 1.17B01
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,
network
low complexity
dlink CWE-787
critical
9.8
2023-05-02 CVE-2023-29856 Classic Buffer Overflow vulnerability in Dlink Dir-868L Firmware 1.12
D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow.
network
low complexity
dlink CWE-120
critical
9.8
2023-05-01 CVE-2023-30061 Improper Authentication vulnerability in Dlink Dir-879 Firmware 1.10
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.
network
low complexity
dlink CWE-287
7.5
2023-05-01 CVE-2023-30063 Improper Authentication vulnerability in Dlink Dir-890L Firmware 1.05
D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
network
low complexity
dlink CWE-287
7.5
2023-04-17 CVE-2023-29665 Out-of-bounds Write vulnerability in Dlink Dir-823G Firmware 1.0.2B05
D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings.
network
low complexity
dlink CWE-787
critical
9.8
2023-04-16 CVE-2022-40946 Unspecified vulnerability in Dlink Dir-819 Firmware 1.06
On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.
network
low complexity
dlink
7.5