Vulnerabilities > Dlink > High

DATE CVE VULNERABILITY TITLE RISK
2019-12-05 CVE-2019-19598 Improper Authentication vulnerability in Dlink Dap-1860 Firmware 1.01B06/1.02B01/1.04B01
D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value.
low complexity
dlink CWE-287
8.8
2019-12-05 CVE-2019-19597 Incorrect Authorization vulnerability in Dlink Dap-1860 Firmware 1.01B06/1.02B01/1.04B01
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
low complexity
dlink CWE-863
8.8
2019-10-25 CVE-2013-4855 Path Traversal vulnerability in Dlink Dir-865L Firmware
D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share.
low complexity
dlink CWE-22
8.8
2019-10-14 CVE-2019-17511 Missing Authentication for Critical Function vulnerability in Dlink Dir-412 Firmware A11.14Ww
There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers.
network
low complexity
dlink CWE-306
7.5
2019-10-11 CVE-2019-17507 Improper Input Validation vulnerability in Dlink Dir-816 A1 Firmware 1.06
An issue was discovered on D-Link DIR-816 A1 1.06 devices.
network
low complexity
dlink CWE-20
7.5
2019-10-11 CVE-2019-17505 Missing Authentication for Critical Function vulnerability in Dlink Dap-1320 A2 Firmware 1.21
D-Link DAP-1320 A2-V1.21 routers have some web interfaces without authentication requirements, as demonstrated by uplink_info.xml.
network
low complexity
dlink CWE-306
7.5
2019-10-09 CVE-2019-17353 Missing Authentication for Critical Function vulnerability in Dlink Dir-615 Firmware 20.05/20.07
An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07.
network
low complexity
dlink CWE-306
8.2
2019-08-27 CVE-2019-13265 Unspecified vulnerability in Dlink Dir-825/Ac G1 Firmware
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device.
low complexity
dlink
8.8
2019-08-27 CVE-2019-13264 Unspecified vulnerability in Dlink Dir-825/Ac G1 Firmware
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device.
low complexity
dlink
8.8
2019-08-27 CVE-2019-13263 Incorrect Resource Transfer Between Spheres vulnerability in Dlink Dir-825/Ac G1 Firmware
D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device.
low complexity
dlink CWE-669
8.8