Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

dlink dir-880l firmware vulnerabilities and exploits

(subscribe to this query)
1000
VMScore

CVE-2016-6563

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-82...
Dlink Dir-823 Firmware -Dlink Dir-822 Firmware -Dlink Dir-818l(w) Firmware -Dlink Dir-895l Firmware -Dlink Dir-890l Firmware -Dlink Dir-885l Firmware -Dlink Dir-880l Firmware -Dlink Dir-868l Firmware -Dlink Dir-850l Firmware -
892
VMScore

CVE-2019-17621

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote malicious user to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local ne...
Dlink Dir-859 FirmwareDlink Dir-859 Firmware 1.06b01Dlink Dir-822 FirmwareDlink Dir-823 FirmwareDlink Dir-823 Firmware 1.00b06Dlink Dir-865l FirmwareDlink Dir-868l FirmwareDlink Dir-869 FirmwareDlink Dir-869 Firmware 1.03b02Dlink Dir-880l FirmwareDlink Dir-890l FirmwareDlink Dir-890l Firmware 1.11b01Dlink Dir-890r FirmwareDlink Dir-890r Firmware 1.11b01Dlink Dir-885l FirmwareDlink Dir-885r FirmwareDlink Dir-895l FirmwareDlink Dir-895r FirmwareDlink Dir-818lx Firmware -
891
VMScore

CVE-2018-19987

D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in /HNAP1/SetAccessPointMode. In the SetAccessPointMode.php source code, the...
D-link Dir-818lw Firmware 2.05.b03D-link Dir-822 Firmware 202krb06Dlink Dir-822 Firmware 3.10b06D-link Dir-860l Firmware 2.03.b03D-link Dir-868l Firmware 2.05b02D-link Dir-880l Firmware 1.20b01 01 I3seD-link Dir-890l/r Firmware 1.21b02
891
VMScore

CVE-2018-6530

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-8...
Dlink Dir-860l FirmwareDlink Dir-865l FirmwareDlink Dir-868l FirmwareDlink Dir-880l Firmware
828
VMScore

CVE-2016-5681

Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 prior to 2.07WWB05, DIR-817 Ax, DIR-818LW Bx prior to 2.05b03beta03, DIR-822 C1 3.01 prior to 3.01WWb02, DIR-823 A1 1.00 prior to 1.00WWb05, DIR-895L A1 1.11 prior to 1.11WWb04, DIR-890L A1 1.09 prior to 1.09...
Dlink Dir-868l FirmwareDlink Dir-822 Firmware 3.01D-link Dir-880l FirmwareD-link Dir-850l FirmareD-link Dir-895l FirmwareD-link Dir-817l(w) FirmwareD-link Dir-818l(w) FirmwareD-link Dir-890l FirmwareD-link Dir-823 FirmwareD-link Dir-885l Firmware
668
VMScore

CVE-2017-14948

Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could al...
Dlink Dir-868l Firmware -Dlink Dir-890l Firmware -Dlink Dir-885l Firmware -Dlink Dir-895l Firmware 1.13b03Dlink Dir-880l Firmware 1.08b04Dlink Dir-895r Firmware 1.13b03
668
VMScore

CVE-2018-20675

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authentication bypass.
Dlink Dir-822 FirmwareDlink Dir-822-us FirmwareDlink Dir-850l FirmwareDlink Dir-850l Firmware 2.22b02Dlink Dir-880l FirmwareDlink Dir-880l Firmware 1.20b01
578
VMScore

CVE-2018-20674

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.
Dlink Dir-822 FirmwareDlink Dir-822-us FirmwareDlink Dir-850l FirmwareDlink Dir-850l Firmware 2.22b02Dlink Dir-880l FirmwareDlink Dir-880l Firmware 1.20b01
445
VMScore

CVE-2020-29322

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated malicious user to gain access to the firmware and to extract sensitive data.
Dlink Dir-880l Firmware 1.07
445
VMScore

CVE-2019-20213

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
Dlink Dir-859 FirmwareDlink Dir-859 Firmware 1.06b01Dlink Dir-822 FirmwareDlink Dir-823 FirmwareDlink Dir-865l FirmwareDlink Dir-868l FirmwareDlink Dir-869 FirmwareDlink Dir-880l FirmwareDlink Dir-890l FirmwareDlink Dir-890r FirmwareDlink Dir-885l FirmwareDlink Dir-885r FirmwareDlink Dir-895l FirmwareDlink Dir-895r FirmwareDlink Dir-818lx Firmware -
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2018-25103CVE-2024-36279CVE-2024-38457elevation of privilegeCVE-2024-27801CVE-2024-30103NULL pointer dereferenceCVE-2024-6057XML injection
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook