Vendor/product archive

dlink / dir-823_firmware CVEs

Beta · best-effort

3 CVEs tagged to dlink / dir-823_firmware — 2 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dlink vendor archive

CVE-2019-20213

Published Jan 2, 2020

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

CVSS 7.5 · High

evidence mentions: 2
Buzz score: 21.0

Vendor/product tagsBeta · best-effort

CVE-2019-17621

Published Dec 30, 2019

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending…

CVSS 9.8 · Critical

evidence mentions: 6
Buzz score: 57.5

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2016-6563

Published Jul 13, 2018

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOA…

CVSS 9.8 · Critical

evidence mentions: 2
Buzz score: 16.0

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1