Skip to content
OpenAdvisories

Vendor

D-Link

856 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

856 results · Feed

  • High 8.8
    CVE-2023-35726

    D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentic…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35727

    D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is no…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35725

    D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentic…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35724

    D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

    D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to …

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-35723

    D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to…

    D-Link DIR-X3260 Network devices
  • High 8.8
    CVE-2023-35718

    D-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenti…

    D-Link DAP-2622 Network devices
  • High 8.8
    CVE-2023-34282

    D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

    D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authentication i…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34281

    D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is req…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34280

    D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is …

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34278

    D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication i…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34279

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34277

    D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34276

    D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authenticatio…

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2023-34275

    D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is require…

    D-Link DIR-2150 Network devices
  • High 8.8
    CVE-2023-34274

    D-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

    D-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2150 routers. Authent…

    D-Link DIR-2150 Network devices
  • Critical 9.8
    CVE-2023-32169 EPSS 56%

    D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

    D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability…

    D-Link D-View Network devices
  • High 8.8
    CVE-2023-32168

    D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability

    D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The speci…

    D-Link D-View Network devices
  • Medium 6.5
    CVE-2023-32167 EPSS 75%

    D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability

    D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit th…

    D-Link D-View Network devices
  • Critical 9.8
    CVE-2023-32165 EPSS 73%

    D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability

    D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulne…

    D-Link D-View Network devices
  • High 8.1
    CVE-2023-32166 EPSS 74%

    D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability

    D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The …

    D-Link D-View Network devices
  • High 7.5
    CVE-2023-32164 EPSS 85%

    D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability

    D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this …

    D-Link D-View Network devices
  • Medium 6.5
    CVE-2023-32152 EPSS 29%

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability

    D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerab…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32153 EPSS 27%

    D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploi…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32151

    D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to expl…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32150 EPSS 27%

    D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to exploi…

    D-Link DIR-2640 Network devices
  • High 8.8
    CVE-2023-32149

    D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Authentication is n…

    D-Link DIR-2640 Network devices
  • Medium 6.5
    CVE-2023-32148 EPSS 29%

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability

    D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2640 routers. Authentication is not required to exploit this vulnerabi…

    D-Link DIR-2640 Network devices
  • Medium 6.8
    CVE-2023-32147

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability

    D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640 routers. Although authentication is required to e…

    D-Link DIR-2640 Network devices
  • High 8.8
    CVE-2023-32146

    D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not req…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32145

    D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability

    D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulne…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32144

    D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is …

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32143

    D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability

    D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32142

    D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not requir…

    D-Link DAP-1360 Network devices
  • High 7.5
    CVE-2023-32140

    D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not re…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32141

    D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32139

    D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exp…

    D-Link DAP-1360 Network devices
  • High 7.5
    CVE-2023-32138

    D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to expl…

    D-Link DAP-1360 Network devices
  • Medium 4.3
    CVE-2023-32137

    D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability

    D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is no…

    D-Link DAP-1360 Network devices
  • High 8.8
    CVE-2023-32136

    D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not requir…

    D-Link DAP-1360 Network devices
  • Medium 6.8
    CVE-2023-41222

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is re…

    D-Link DIR-3040 Network devices