D-Link Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

DNS-32059 vulnerabilities
DAP-262254 vulnerabilities
DNS-32550 vulnerabilities
DNS-340L49 vulnerabilities
DNS-320LW48 vulnerabilities
DNS-320L47 vulnerabilities
DNS-327L47 vulnerabilities
DIR-605L46 vulnerabilities
DNR-322L45 vulnerabilities
DNS-34545 vulnerabilities
DNR-202L44 vulnerabilities
DNR-32644 vulnerabilities
DNS-1100-444 vulnerabilities
DNS-12044 vulnerabilities
DNS-1200-0544 vulnerabilities
DNS-1550-0444 vulnerabilities
DNS-315L44 vulnerabilities
DNS-32144 vulnerabilities
DNS-32344 vulnerabilities
DNS-32644 vulnerabilities
DNS-34344 vulnerabilities
DNS-726-444 vulnerabilities
DAP-132537 vulnerabilities
DIR-619L37 vulnerabilities
DIR-823X32 vulnerabilities

D-Link vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2024-0769MEDIUM	D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier a… CWE-22Jan 21, 2024	CVSS5.3v3.1	EPSS82.7%	PoCs0	SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2019-17621CRITICAL	D-Link DIR-859 Router Command Execution Vulnerability The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. CWE-78Dec 30, 2019	CVSS9.8v3.1	EPSS89.6%	PoCs2	SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates	STIX