Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
dlink dsl-2888a firmware vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2020-24577
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. The One Touch application discloses sensitive information, such as the hashed admin login password and the Internet provider connection username and cleartext password, in the application'...
Dlink Dsl-2888a Firmware
5
CVSSv2
CVE-2021-33346
There is an arbitrary password modification vulnerability in a D-LINK DSL-2888A router product. An attacker can use this vulnerability to modify the password of the admin user without authorization.
Dlink Dsl-2888a Firmware -
5.8
CVSSv2
CVE-2020-27862
This vulnerability allows network-adjacent malicious users to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens...
Dlink Dva-2800 Firmware 2.30 Au
Dlink Dsl-2888a Firmware 2.30 Au
3.3
CVSSv2
CVE-2020-27863
This vulnerability allows network-adjacent malicious users to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which...
Dlink Dva-2800 Firmware 2.30 Au
Dlink Dsl-2888a Firmware 2.30 Au
5.8
CVSSv2
CVE-2020-24579
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality.
Dlink Dsl2888a Firmware
5.4
CVSSv2
CVE-2020-24580
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an malicious user to assign a static IP address that was once used by a valid user.
Dlink Dsl2888a Firmware
7.7
CVSSv2
CVE-2020-24581
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an authenticated user execute Operating System commands.
Dlink Dsl2888a Firmware
3.3
CVSSv2
CVE-2020-24578
An issue exists on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files (such as the password hash file).
Dlink Dsl2888a Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5834
CVE-2024-30100
CVE-2024-4577
physical
dos
CVE-2024-30099
CVE-2024-27801
CVE-2024-32146
logic flaw
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started