Skip to content
OpenAdvisories

Vendor

D-Link

855 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

255 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-4443 EPSS 63%

    D-Link DIR-605L sub_454F2C command injection

    A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted…

    D-Link DIR-605L Network devices
  • Medium 6.3
    CVE-2025-4341 EPSS 24%

    D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

    A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_A…

    D-Link DIR-880L Network devices
  • Medium 6.3
    CVE-2025-4340

    D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection

    A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack rem…

    D-Link DIR-890L DIR-806A1 Network devices
  • Medium 4.7
    CVE-2025-2717

    D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection

    A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument targe…

    D-Link DIR-823X Network devices
  • Medium 4.3
    CVE-2025-2553

    D-Link DIR-618/DIR-605L formVirtualServ access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be ap…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2552

    D-Link DIR-618/DIR-605L formTcpipSetup access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local networ…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2551

    D-Link DIR-618/DIR-605L formSetPortTr access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is requi…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2550

    D-Link DIR-618/DIR-605L DDNS Service formSetDDNS access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access con…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2549

    D-Link DIR-618/DIR-605L formSetPassword access control

    A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The atta…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2548

    D-Link DIR-618/DIR-605L formSetDomainFilter access control

    A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initi…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2547

    D-Link DIR-618/DIR-605L formAdvNetwork access control

    A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can on…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 4.3
    CVE-2025-2546 EPSS 11%

    D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control

    A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. Th…

    D-Link DIR-605L DIR-618 Network devices
  • Medium 6.5
    CVE-2025-1877

    D-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereference

    A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pure_auth_check of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible t…

    D-Link DAP-1562 Network devices
  • Medium 6.3
    CVE-2025-1800

    D-Link DAR-7000 HTTP POST Request sxh_vpnlic.php get_ip_addr_details command injection

    A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argu…

    D-Link DAR-7000 Network devices
  • Medium 6.5
    CVE-2025-1103 EPSS 14%

    D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

    A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argumen…

    D-Link DIR-823X Network devices
  • Medium 5.3
    CVE-2025-0481

    D-Link DIR-878 HTTP POST Request dllog.cgi information disclosure

    A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the …

    D-Link DIR-878 Network devices
  • Medium 5.3
    CVE-2024-13108

    D-Link DIR-816 A2 form2NetSniper.cgi access control

    A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be init…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-13107

    D-Link DIR-816 A2 ACL form2LocalAclEditcfg.cgi access control

    A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been classified as critical. This affects an unknown part of the file /goform/form2LocalAclEditcfg.cgi of the component ACL Handler. The manipulation leads to improper access contro…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-13106 EPSS 26%

    D-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access control

    A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/form2IPQoSTcAdd of the component IP QoS Handler. The manipulation leads to improper acce…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-13105

    D-Link DIR-816 A2 DHCPD Setting form2Dhcpd.cgi access control

    A vulnerability has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/form2Dhcpd.cgi of the component DHCPD Setting Handler. The manipulation leads…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-13104

    D-Link DIR-816 A2 WiFi Settings form2AdvanceSetup.cgi access control

    A vulnerability, which was classified as critical, was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. Affected is an unknown function of the file /goform/form2AdvanceSetup.cgi of the component WiFi Settings Handler. The manipulation leads to improper acce…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-13103

    D-Link DIR-816 A2 Virtual Service form2AddVrtsrv.cgi access control

    A vulnerability, which was classified as critical, has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This issue affects some unknown processing of the file /goform/form2AddVrtsrv.cgi of the component Virtual Service Handler. The manipulation leads t…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-13102

    D-Link DIR-816 A2 DDNS Service access control

    A vulnerability classified as critical was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This vulnerability affects unknown code of the file /goform/DDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack can be…

    D-Link DIR-816 A2 Network devices
  • Medium 6.3
    CVE-2024-11046

    D-Link DI-8003 upgrade_filter.asp upgrade_filter_asp os command injection

    A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. It is possible to lau…

    D-Link DI-8003 Network devices
  • Medium 5.3
    CVE-2024-10916

    D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L HTTP GET Request info.xml information disclosure

    A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 5.5
    CVE-2024-9908

    D-Link DIR-619L B1 formSetMACFilter buffer overflow

    A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument curTime leads to buffer overflow. The exploit has been di…

    D-Link DIR-619L B1 Network devices
  • Medium 6.3
    CVE-2024-9004 EPSS 17%

    D-Link DAR-7000 Backup_Server_commit.php os command injection

    A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/Backup_Server_commit.php. The manipulation of the argument host leads to os command injection. It is possible t…

    D-Link DAR-7000 Network devices
  • Medium 5.3
    CVE-2024-8461

    D-Link DNS-320 Web Management Interface discovery.cgi information disclosure

    A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part of the file /cgi-bin/discovery.cgi of the component Web Management Interface. The manipulation leads to information disclosure. It is possi…

    D-Link DNS-320 Network devices
  • Medium 6.3
    CVE-2024-8214

    D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection

    A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8213

    D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection

    A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-…

    D-Link DNS-320 DNS-340L DNS-327L Network devices
  • Medium 6.3
    CVE-2024-8212

    D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It h…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8211

    D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It h…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8210

    D-Link DNS-1550-04 hd_config.cgi sprintf command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It h…

    D-Link DNS-320 DNS-340L DNS-327L Network devices
  • Medium 6.3
    CVE-2024-8134

    D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It h…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8133

    D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It h…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8132 EPSS 24%

    D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. It h…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8131

    D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and c…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8130

    D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection

    A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 …

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8129 EPSS 24%

    D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection

    A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 a…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-8128

    D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection

    A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200…

    D-Link DNS-320 DNS-340L DNS-325 Network devices