Skip to content
OpenAdvisories

Vendor

D-Link

856 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

856 results · Feed

  • High 8.8
    CVE-2024-5291

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required…

    D-Link DIR-2150 Network devices
  • Medium 6.3
    CVE-2024-4965

    D-Link DAR-7000-40 resmanage.php os command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command …

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4964

    D-Link DAR-7000-40 urlblist.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affects unknown code of the file /firewall/urlblist.php. The manipulation of the argument file leads to unrestrict…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4963

    D-Link DAR-7000-40 url.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unknown part of the file /url/url.php. The manipulation of the argument file_upload leads to unrestricted upload. …

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4962

    D-Link DAR-7000-40 resmanage.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument fi…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4961

    D-Link DAR-7000-40 onlineuser.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument file_upload lead…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4960

    D-Link DAR-7000-40 licenseauthorization.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument file_upload le…

    D-Link DAR-7000-40 Network devices
  • Medium 6.3
    CVE-2024-4699

    D-Link DAR-8000-10 importhtml.php deserialization

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deser…

    D-Link DAR-8000-10 Network devices
  • Medium 5.4
    CVE-2023-37325

    D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability

    D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized changes to device configuration on affected installations of D-Link DAP-2622 routers. Authentication is not requi…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35757

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication i…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35749

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication …

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35748

    D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Auth…

    D-Link DAP-2622 Network devices
  • Medium 6.3
    CVE-2023-51629

    D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

    D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit t…

    D-Link DCS-8300LHV2 Network devices
  • High 8.0
    CVE-2023-51628

    D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authent…

    D-Link DCS-8300LHV2 Network devices
  • High 8.0
    CVE-2023-51627

    D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentica…

    D-Link DCS-8300LHV2 Network devices
  • High 8.8
    CVE-2023-51626

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP c…

    D-Link DCS-8300LHV2 Network devices
  • High 8.0
    CVE-2023-51625

    D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authenti…

    D-Link DCS-8300LHV2 Network devices
  • High 8.8
    CVE-2023-51624

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP came…

    D-Link DCS-8300LHV2 Network devices
  • Medium 6.8
    CVE-2023-51623

    D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51622

    D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentica…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51621

    D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication i…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51620

    D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticatio…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51619

    D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticat…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51618

    D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticatio…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51617

    D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is r…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51616

    D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51615

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentica…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51614

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authe…

    D-Link DIR-X3260 Network devices
  • Medium 6.8
    CVE-2023-51613

    D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticati…

    D-Link DIR-X3260 Network devices
  • High 8.8
    CVE-2023-50217

    D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulne…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50216

    D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exp…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50215

    D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to expl…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50214

    D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exp…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50213

    D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability

    D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit…

    D-Link G416 Network devices
  • Medium 4.3
    CVE-2023-50212

    D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability

    D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not …

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50211

    D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50210

    D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is no…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50209

    D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to ex…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50208

    D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit thi…

    D-Link G416 Network devices
  • High 8.8
    CVE-2023-50207

    D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability

    D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this v…

    D-Link G416 Network devices