Vulnerabilidades en D-LINK
823 resultadosAnálisis Vexday
D-Link apresenta uma vulnerabilidade crítica em sua base (CVSS crítico), ligada a injeção de comando (CWE-78), publicada recentemente nos últimos 90 dias. Apesar do volume reduzido, a severidade da falha e sua recência exigem atenção imediata, embora nenhum ataque ativo tenha sido documentado até o momento.
CVE-2023-32144HIGHD-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-32139HIGHD-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41229HIGHD-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-44416MEDIUMD-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-45697CRITICALD-Link WiFi router - Hidden FunctionalityEPSS 1.0%CVE-2026-1685MEDIUMD-Link DIR-823X Login sub_40AC74 excessive authenticationEPSS 1.0%CVE-2020-27863MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-EPSS 1.0%CVE-2025-34254MEDIUMD-Link Nuclias Connect <= v1.3.1.4 Login Account EnumerationEPSS 1.0%CVE-2023-51631MEDIUMD-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-34255MEDIUMD-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account EnumerationEPSS 1.0%CVE-2023-41187HIGHD-Link DAP-1325 HNAP Missing Authentication Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-10093MEDIUMD-Link DIR-852 Device Configuration getcfg.php phpcgi_main information disclosureEPSS 1.0%CVE-2025-2548MEDIUMD-Link DIR-618/DIR-605L formSetDomainFilter access controlEPSS 1.0%CVE-2025-2549MEDIUMD-Link DIR-618/DIR-605L formSetPassword access controlEPSS 1.0%CVE-2025-11338HIGHD-Link DI-7100G C1 jhttpd login.cgi sub_4C0990 buffer overflowEPSS 1.0%CVE-2023-44415MEDIUMD-Link Multiple Routers cli Command Injection Remote Code Execution VulnerabilityEPSS 1.0%CVE-2022-43630HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AuEPSS 1.0%CVE-2022-43622HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AuEPSS 1.0%CVE-2024-13108MEDIUMD-Link DIR-816 A2 form2NetSniper.cgi access controlEPSS 1.0%CVE-2026-91003CRITICALD-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowEPSS 1.0%