Skip to content
OpenAdvisories

Vendor

D-Link

855 known vulnerabilities.

855 results · Feed

  • High 7.5

    D-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of service

    A vulnerability classified as critical was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This vulnerability affects the function sub_4983B0 of the file /H5/backup.asp?opt=reset of the component Factory Reset Handler. The manipulation leads to denial of serv…

  • Medium 6.6
    CVE-2025-4544 EPSS 12%

    D-Link DI-8100 jhttpd ddos.asp stack-based overflow

    A vulnerability was found in D-Link DI-8100 up to 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /ddos.asp of the component jhttpd. The manipulation of the argument def_max/def_time/def_tcp_max/def_tcp_time/def_u…

  • Medium 6.3

    D-Link DIR-619L wake_on_lan command injection

    A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was …

  • Medium 6.3

    D-Link DIR-619L formSysCmd command injection

    A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was …

  • High 8.8

    D-Link DIR-619L formSetWizard2 buffer overflow

    A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was cont…

  • High 8.8

    D-Link DIR-619L formSetWAN_Wizard52 buffer overflow

    A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. T…

  • High 8.8

    D-Link DIR-619L formSetEasy_Wizard buffer overflow

    A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor w…

  • High 8.8

    D-Link DIR-619L formEasySetupWizard3 buffer overflow

    A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wan_connected leads to buffer overflow. The attack may be initiated remotely. …

  • High 8.8

    D-Link DIR-619L formEasySetupWizard buffer overflow

    A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was c…

  • Medium 6.3

    D-Link DIR-605L wake_on_lan command injection

    A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wake_on_lan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted ear…

  • Medium 6.3
    CVE-2025-4443 EPSS 63%

    D-Link DIR-605L sub_454F2C command injection

    A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted…

  • High 8.8

    D-Link DIR-605L formSetWAN_Wizard55 buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWAN_Wizard55. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The v…

  • High 8.8

    D-Link DIR-605L formSetWAN_Wizard534 buffer overflow

    A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formSetWAN_Wizard534. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The ve…

  • High 8.8

    D-Link DIR-600L wake_on_lan command injection

    A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wake_on_lan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability …

  • High 8.8

    D-Link DIR-600L formSysCmd command injection

    A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability …

  • High 8.8

    D-Link DIR-600L formSetWanL2TP buffer overflow

    A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been rated as critical. Affected by this issue is the function formSetWanL2TP. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnera…

  • High 8.8

    D-Link DIR-600L formWlSiteSurvey buffer overflow

    A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been declared as critical. Affected by this vulnerability is the function formWlSiteSurvey. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely.…

  • High 8.8

    D-Link DIR-600L formSetWAN_Wizard534 buffer overflow

    A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been classified as critical. Affected is the function formSetWAN_Wizard534. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. This v…

  • High 8.8

    D-Link DIR-600L formSetLog buffer overflow

    A vulnerability was found in D-Link DIR-600L up to 2.07B01 and classified as critical. This issue affects the function formSetLog. The manipulation of the argument host leads to buffer overflow. The attack may be initiated remotely. This vulnerability only af…

  • High 8.8

    D-Link DIR-600L formLogin buffer overflow

    A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. This affects the function formLogin. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. This vulnerabil…

  • High 8.8

    D-Link DIR-600L formEasySetupWizard buffer overflow

    A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. This…

  • High 8.8

    D-Link DIR-600L formEasySetupWizard3 buffer overflow

    A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this issue is the function formEasySetupWizard3. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotel…

  • Medium 6.3
    CVE-2025-4341 EPSS 24%

    D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection

    A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_A…

  • Medium 6.3

    D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection

    A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack rem…

  • High 8.8
    CVE-2025-3785 EPSS 13%

    D-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflow

    A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formStaticDHCP of the component Authorization Interface. The manipulation of the argument Hostname leads to stack-…

  • High 8.8
    CVE-2025-3538 EPSS 13%

    D-Link DI-8100 jhttpd auth.asp auth_asp stack-based overflow

    A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The …

  • Medium 4.7

    D-Link DIR-823X HTTP POST Request diag_nslookup sub_41710C os command injection

    A vulnerability, which was classified as critical, has been found in D-Link DIR-823X 240126/240802. This issue affects the function sub_41710C of the file /goform/diag_nslookup of the component HTTP POST Request Handler. The manipulation of the argument targe…

  • Critical 9.8

    D-Link DAP-1620 storage check_dws_cookie stack-based overflow

    A vulnerability was found in D-Link DAP-1620 1.03 and classified as critical. This issue affects the function check_dws_cookie of the file /storage. The manipulation of the argument uid leads to stack-based buffer overflow. The attack may be initiated remotel…

  • Critical 9.8
    CVE-2025-2620 Public exploit

    D-Link DAP-1620 Authentication storage mod_graph_auth_uri_handler stack-based overflow

    A vulnerability has been found in D-Link DAP-1620 1.03 and classified as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer ov…

  • Critical 9.8

    D-Link DAP-1620 Cookie storage check_dws_cookie stack-based overflow

    A vulnerability, which was classified as critical, was found in D-Link DAP-1620 1.03. This affects the function check_dws_cookie of the file /storage of the component Cookie Handler. The manipulation leads to stack-based buffer overflow. It is possible to ini…

  • Critical 9.8

    D-Link DAP-1620 Path api set_ws_action heap-based overflow

    A vulnerability, which was classified as critical, has been found in D-Link DAP-1620 1.03. Affected by this issue is the function set_ws_action of the file /dws/api/ of the component Path Handler. The manipulation leads to heap-based buffer overflow. The atta…

  • Medium 4.3

    D-Link DIR-618/DIR-605L formVirtualServ access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be ap…

  • Medium 4.3

    D-Link DIR-618/DIR-605L formTcpipSetup access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local networ…

  • Medium 4.3

    D-Link DIR-618/DIR-605L formSetPortTr access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is requi…

  • Medium 4.3

    D-Link DIR-618/DIR-605L DDNS Service formSetDDNS access control

    A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access con…

  • Medium 4.3

    D-Link DIR-618/DIR-605L formSetPassword access control

    A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The atta…

  • Medium 4.3

    D-Link DIR-618/DIR-605L formSetDomainFilter access control

    A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initi…

  • Medium 4.3

    D-Link DIR-618/DIR-605L formAdvNetwork access control

    A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can on…

  • Medium 4.3
    CVE-2025-2546 EPSS 11%

    D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control

    A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. Th…

  • High 7.3

    D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization

    A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to impro…