Vulnerabilidades em D-Link

821 resultados
Análise Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2023-41211HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41205HIGHD-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41208HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41213HIGHD-Link DAP-1325 setDhcpAssignRangeUpdate lan_ipaddr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41207HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41210HIGHD-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-86297CRITICALD-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-oneEPSS 1.0%CVE-2025-1877HIGHD-Link DAP-1562 HTTP POST Request pure_auth_check null pointer dereferenceEPSS 1.0%CVE-2026-90880MEDIUMD-Link DSL-3782 Diagnostics Diagnostics.asp system command injectionEPSS 1.0%CVE-2026-11341MEDIUMD-Link DWR-M920 formIMEISetup sub_412DA0 os command injectionEPSS 1.0%CVE-2023-32139HIGHD-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-32144HIGHD-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-41229HIGHD-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-44416MEDIUMD-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-45697CRITICALD-Link WiFi router - Hidden FunctionalityEPSS 1.0%CVE-2026-1685MEDIUMD-Link DIR-823X Login sub_40AC74 excessive authenticationEPSS 1.0%CVE-2020-27863MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-EPSS 1.0%CVE-2023-51631MEDIUMD-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2025-34254MEDIUMD-Link Nuclias Connect <= v1.3.1.4 Login Account EnumerationEPSS 1.0%CVE-2025-34255MEDIUMD-Link Nuclias Connect <= v1.3.1.4 Forgot Password Account EnumerationEPSS 1.0%