Vulnerabilities in D-Link

823 results
Vexday analysis

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2023-41188HIGHD-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-41193HIGHD-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-41201HIGHD-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-41196HIGHD-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress Command Injection Remote Code Execution VulnerabilityEPSS 1.4%CVE-2023-41200HIGHD-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticPrefixLength Command Injection Remote Code Execution VulnerabilityEPSS 1.4%CVE-2020-27862HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A roEPSS 1.4%CVE-2024-9559HIGHD-Link DIR-605L formWlanSetup buffer overflowEPSS 1.4%CVE-2024-9557HIGHD-Link DIR-605L formSetWanPPPoE buffer overflowEPSS 1.4%CVE-2024-9552HIGHD-Link DIR-605L formSetWanNonLogin buffer overflowEPSS 1.4%CVE-2024-9563HIGHD-Link DIR-605L formWlanSetup_Wizard buffer overflowEPSS 1.4%CVE-2024-9558HIGHD-Link DIR-605L formSetWanPPTP buffer overflowEPSS 1.4%CVE-2024-9551HIGHD-Link DIR-605L formSetWanL2TP buffer overflowEPSS 1.4%CVE-2025-0481MEDIUMD-Link DIR-878 HTTP POST Request dllog.cgi information disclosureEPSS 1.4%CVE-2025-4749HIGHD-Link DI-7003GV2 Factory Reset backup.asp sub_4983B0 denial of serviceEPSS 1.4%CVE-2023-32224CRITICALD-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication AttemptsEPSS 1.4%CVE-2026-7069HIGHD-Link DIR-825 miniupnpd upnpsoap.c AddPortMapping buffer overflowEPSS 1.4%CVE-2025-5912HIGHD-Link DIR-632 HTTP POST Request do_file stack-based overflowEPSS 1.4%CVE-2024-9556HIGHD-Link DIR-605L formSetEnableWizard buffer overflowEPSS 1.4%CVE-2024-9553HIGHD-Link DIR-605L formdumpeasysetup buffer overflowEPSS 1.4%CVE-2024-9562HIGHD-Link DIR-605L formSetWizard2 buffer overflowEPSS 1.4%