Skip to content
OpenAdvisories

Vendor

D-Link

855 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

255 results · Clear filters · Feed

  • Medium 6.8
    CVE-2023-41219

    D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is req…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41218

    D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is re…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-41216

    D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication…

    D-Link DIR-3040 Network devices
  • Medium 6.5
    CVE-2023-41186

    D-Link DAP-1325 CGI Missing Authentication Information Disclosure Vulnerability

    D-Link DAP-1325 CGI Missing Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to access various functionality on affected installations of D-Link DAP-1325 routers. Authentication is not required to explo…

    D-Link DAP-1325 Network devices
  • Medium 6.8
    CVE-2023-34281

    D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is req…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34280

    D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is …

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34278

    D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication i…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34279

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34277

    D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34276

    D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authenticatio…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34275

    D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is require…

    D-Link DIR-2150 Network devices
  • Medium 6.5
    CVE-2023-32167 EPSS 75%

    D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability

    D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit th…

    D-Link D-View Network devices
  • Medium 6.5
    CVE-2023-32152 EPSS 29%

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerab…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32153 EPSS 27%

    D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploi…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32151

    D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to expl…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32150 EPSS 27%

    D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploi…

    D-Link DIR-2640 Network devices
  • Medium 6.5
    CVE-2023-32148 EPSS 29%

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerabi…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32147

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to e…

    D-Link DIR-2640 Network devices
  • Medium 4.3
    CVE-2023-32137

    D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability

    D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is no…

    D-Link DAP-1360 Network devices
  • Medium 6.8
    CVE-2023-41222

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is re…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-51631

    D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is…

    D-Link DIR-X3260 Network devices
  • Medium 5.3
    CVE-2024-3274 Scanner template EPSS 33%

    D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component H…

    D-Link DNS-327L DNS-320L DNS-320LW Network devices
  • Medium 4.7
    CVE-2024-0921 EPSS 38%

    D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection

    A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statusc…

    D-Link DIR-816 A2 Network devices
  • Medium 5.3
    CVE-2024-0769 Exploited EPSS 83%

    D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of th…

    D-Link DIR-859 Network devices
    KEV Jun 25, 2025
  • Medium 5.3
    CVE-2024-0717 EPSS 18%

    D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

    A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, D…

    D-Link DIR-825 DIR-2150 DIR-816 Network devices
  • Medium 5.5
    CVE-2023-6581

    D-Link DAR-7000 workidajax.php sql injection

    A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/workidajax.php. The manipulation of the argument id leads to sql injection. The exploit has been disclos…

    D-Link DAR-7000 Network devices
  • Medium 4.7
    CVE-2023-5322 EPSS 17%

    D-Link DAR-7000 edit_manageadmin.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/edit_manageadmin.php. The manipulation of the argument id l…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5154 EPSS 15%

    D-Link DAR-8000 changelogo.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to u…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5153

    D-Link DAR-8000 querysql.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate th…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5152

    D-Link DAR-7000/DAR-8000 importexport.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argum…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5151 EPSS 81%

    D-Link DAR-8000 autheditpwd.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affected by this vulnerability is an unknown functionality of the file /autheditpwd.php. The manipulation of the argument hid_id leads to sql i…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5150 EPSS 23%

    D-Link DAR-7000/DAR-8000 web.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestri…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5149 EPSS 21%

    D-Link DAR-7000 userattestation.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5148 EPSS 31%

    D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload …

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5147 EPSS 26%

    D-Link DAR-7000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestri…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5146 EPSS 32%

    D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fi…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5145 EPSS 34%

    D-Link DAR-7000 licence.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_u…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5144

    D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload lead…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5143

    D-Link DAR-7000 webmailattach.php Privilege Escalation

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name lea…

    D-Link DAR-7000 Network devices
  • Medium 5.0
    CVE-2023-4711

    D-Link DAR-8000-10 decodmail.php os command injection

    A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. T…

    D-Link DAR-8000-10 Network devices