Vulnerabilities in D-Link

823 results
Vexday analysis

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2024-5291HIGHD-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution VulnerabilityEPSS 2.0%CVE-2024-5295HIGHD-Link G416 flupl self Command Injection Remote Code Execution VulnerabilityEPSS 2.0%CVE-2022-43643HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.EPSS 1.9%CVE-2023-32222CRITICALD-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication BypassEPSS 1.9%CVE-2024-9564HIGHD-Link DIR-605L formWlanWizardSetup buffer overflowEPSS 1.9%CVE-2024-5297HIGHD-Link D-View executeWmicCmd Command Injection Remote Code Execution VulnerabilityEPSS 1.9%CVE-2024-13030MEDIUMD-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access controlEPSS 1.9%CVE-2024-45694CRITICALD-Link WiFi router - Stack-based Buffer OverflowEPSS 1.9%CVE-2026-1596MEDIUMD-Link DWR-M961 formLtefotaUpgradeQuectel sub_419920 command injectionEPSS 1.9%CVE-2026-7068HIGHD-Link DIR-825 nmbd sserver.c NMBD_process buffer overflowEPSS 1.9%CVE-2025-0492HIGHD-Link DIR-823X FUN_00412244 null pointer dereferenceEPSS 1.9%CVE-2024-8461MEDIUMD-Link DNS-320 Web Management Interface discovery.cgi information disclosureEPSS 1.9%CVE-2024-5298HIGHD-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution VulnerabilityEPSS 1.8%CVE-2024-7829HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflowEPSS 1.8%CVE-2024-7831HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflowEPSS 1.8%CVE-2024-7830HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflowEPSS 1.8%CVE-2024-5299HIGHD-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution VulnerabilityEPSS 1.8%CVE-2025-4756MEDIUMD-Link DI-7003GV2 restart.asp denial of serviceEPSS 1.8%CVE-2024-9915HIGHD-Link DIR-619L B1 formVirtualServ buffer overflowEPSS 1.8%CVE-2024-9566HIGHD-Link DIR-619L B1 formDeviceReboot buffer overflowEPSS 1.8%