Dlink: Security Vulnerabilities
D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.
CVSS Score
8.8
EPSS Score
0.018
Published
2023-06-28
D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers to reset the WEB page management password.
CVSS Score
7.5
EPSS Score
0.009
Published
2023-06-28
D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.
CVSS Score
9.8
EPSS Score
0.293
Published
2023-06-15
D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.
CVSS Score
9.8
EPSS Score
0.332
Published
2023-06-12
D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.
CVSS Score
9.8
EPSS Score
0.015
Published
2023-06-12
A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /auth_pic.cgi.
CVSS Score
5.4
EPSS Score
0.006
Published
2023-06-09
An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.
CVSS Score
8.8
EPSS Score
0.32
Published
2023-06-07
D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.
CVSS Score
8.8
EPSS Score
0.366
Published
2023-06-07
D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter in the /HNAP1 interface.
CVSS Score
9.8
EPSS Score
0.326
Published
2023-05-31
D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-05-23