Skip to content
OpenAdvisories

Vendor

D-Link

855 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

255 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-8127

    D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection

    A vulnerability classified as critical was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-7922 EPSS 20%

    D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection

    A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and c…

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-7833

    D-Link DI-8100 upgrade_filter.asp upgrade_filter_asp command injection

    A vulnerability was found in D-Link DI-8100 16.07. It has been classified as critical. This affects the function upgrade_filter_asp of the file upgrade_filter.asp. The manipulation of the argument path leads to command injection. It is possible to initiate th…

    D-Link DI-8100 Network devices
  • Medium 6.3
    CVE-2024-7715 EPSS 26%

    D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and …

    D-Link DNS-320 DNS-340L DNS-325 Network devices
  • Medium 6.3
    CVE-2024-7436

    D-Link DI-8100 msp_info.htm msp_info_htm command injection

    A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07. This issue affects the function msp_info_htm of the file msp_info.htm. The manipulation of the argument cmd leads to command injection. The attack may be initiated remo…

    D-Link DI-8100 Network devices
  • Medium 6.3
    CVE-2024-7357

    D-Link DIR-600 soap.cgi soapcgi_main os command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. The manipulation of the argument service leads to os command injection. …

    D-Link DIR-600 Network devices
  • Medium 6.5
    CVE-2024-6044

    D-Link router - Arbitrary File Reading

    Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.

    D-Link G416 M60 R32 Network devices
  • Medium 4.3
    CVE-2024-5294

    D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability

    D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of D-Link DIR-3040 routers. Authentication is not …

    D-Link DIR-3040 Network devices
  • Medium 6.3
    CVE-2024-4965

    D-Link DAR-7000-40 resmanage.php os command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command …

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4964

    D-Link DAR-7000-40 urlblist.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affects unknown code of the file /firewall/urlblist.php. The manipulation of the argument file leads to unrestrict…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4963

    D-Link DAR-7000-40 url.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unknown part of the file /url/url.php. The manipulation of the argument file_upload leads to unrestricted upload. …

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4962

    D-Link DAR-7000-40 resmanage.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument fi…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4961

    D-Link DAR-7000-40 onlineuser.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument file_upload lead…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4960

    D-Link DAR-7000-40 licenseauthorization.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument file_upload le…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4699

    D-Link DAR-8000-10 importhtml.php deserialization

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deser…

    D-Link DAR-8000-10 Network devices
  • Medium 5.4
    CVE-2023-37325

    D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability

    D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not requi…

    D-Link DAP-2622 Network devices
  • Medium 6.3
    CVE-2023-51629

    D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

    D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit t…

    D-Link DCS-8300LHV2 Network devices
  • Medium 6.8
    CVE-2023-51623

    D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51622

    D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentica…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51621

    D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication i…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51620

    D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticatio…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51619

    D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticat…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51618

    D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticatio…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51617

    D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is r…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51616

    D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51615

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentica…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51614

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authe…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51613

    D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticati…

    D-Link DIR-X3260 Network devices
  • Medium 4.3
    CVE-2023-50212

    D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability

    D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not …

    D-Link G416 Network devices
  • Medium 6.8
    CVE-2023-44416

    D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability

    D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622. Authentication is required to exploit this vulnerabi…

    D-Link DAP-2622 Network devices
  • Medium 6.8
    CVE-2023-44415

    D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability

    D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to …

    D-Link DIR-2150 Network devices
  • Medium 5.9
    CVE-2023-44413

    D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability

    D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit …

    D-Link D-View Network devices
  • Medium 6.8
    CVE-2023-41228

    D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is r…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41227

    D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authenticati…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41226

    D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authenticatio…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41225

    D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication …

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41224

    D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is …

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41223

    D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authenticati…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41221

    D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication …

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41220

    D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication i…

    D-Link DIR-3040 Network devices