Vulnerabilidades em D-Link

823 resultados
Análise Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2022-43648HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers.EPSS 0.9%CVE-2023-50206HIGHD-Link G416 flupl query_type edit Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50201HIGHD-Link G416 cfgsave upusb Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50207HIGHD-Link G416 flupl filename Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50200HIGHD-Link G416 cfgsave backusb Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-32145HIGHD-Link DAP-1360 Hardcoded Credentials Authentication Bypass VulnerabilityEPSS 0.9%CVE-2023-50202HIGHD-Link G416 flupl pythonmodules Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50213HIGHD-Link G416 nodered File Handling Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50216HIGHD-Link G416 awsfile tar File Handling Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50217HIGHD-Link G416 awsfile rm Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-50205HIGHD-Link G416 awsfile chmod Command Injection Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-32140HIGHD-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2022-36786CRITICALDLINK - DSL-224 Post-auth RCE.EPSS 0.9%CVE-2025-6373HIGHD-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflowEPSS 0.9%CVE-2025-6881HIGHD-Link DI-8100 jhttpd pppoe_base.asp buffer overflowEPSS 0.9%CVE-2023-44420HIGHD-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass VulnerabilityEPSS 0.9%CVE-2023-41227MEDIUMD-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41220MEDIUMD-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41216MEDIUMD-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41219MEDIUMD-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%