Vulnerabilidades em D-Link

818 resultados
Análise Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2023-35732HIGHD-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35727HIGHD-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35737HIGHD-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35728HIGHD-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35751HIGHD-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-35739HIGHD-Link DAP-2622 DDP Configuration Backup Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-4182CRITICALD-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflowEPSS 1.1%CVE-2022-43625MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2023-37323HIGHD-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-7855HIGHD-Link DI-8100 HTTP Request tggl.asp tggl_asp buffer overflowEPSS 1.1%CVE-2026-16448MEDIUMD-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injectionEPSS 1.1%CVE-2022-43620HIGHThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. AutEPSS 1.1%CVE-2023-41211HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41212HIGHD-Link DAP-1325 SetTriggerAPValidate Key Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41202HIGHD-Link DAP-1325 SetAPLanSettings Mode Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41203HIGHD-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41208HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41207HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41209HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1 Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41213HIGHD-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%