Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

dlink / dir-2150 CVEs

Beta · best-effort

16 CVEs tagged to dlink / dir-2150 — 0 Critical, 16 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to dlink vendor archive

CVE-2024-5291

Published May 23, 2024

D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on a…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34282

Published May 3, 2024

D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authe…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34281

Published May 3, 2024

D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on a…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34280

Published May 3, 2024

D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code o…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34279

Published May 3, 2024

D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on a…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34278

Published May 3, 2024

D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34277

Published May 3, 2024

D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary co…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34276

Published May 3, 2024

D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary c…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34275

Published May 3, 2024

D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affec…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2023-34274

Published May 3, 2024

D-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to byp…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2022-3210

Published Mar 29, 2023

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to ex…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2022-40720

Published Jan 26, 2023

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to ex…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2022-40719

Published Jan 26, 2023

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to ex…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-16 of 16 CVEsPage 1 of 1