Vulnerabilidades em D-Link

823 resultados
Análise Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2023-41226MEDIUMD-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41227MEDIUMD-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41225MEDIUMD-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-13189HIGHD-Link DIR-816L gena.cgi genacgi_main stack-based overflowEPSS 0.9%CVE-2025-13191HIGHD-Link DIR-816L soap.cgi soapcgi_main stack-based overflowEPSS 0.9%CVE-2025-10779HIGHD-Link DCS-935L HNAP1 sub_402280 stack-based overflowEPSS 0.9%CVE-2026-2857HIGHD-Link DWR-M960 Port Forwarding Configuration Endpoint formPortFw sub_423E00 stack-based overflowEPSS 0.9%CVE-2026-2853HIGHD-Link DWR-M960 System Log Configuration Endpoint formSysLog sub_462E14 stack-based overflowEPSS 0.9%CVE-2023-41222MEDIUMD-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41223MEDIUMD-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41221MEDIUMD-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41218MEDIUMD-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2023-41224MEDIUMD-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-7194HIGHD-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflowEPSS 0.9%CVE-2023-41215HIGHD-Link DAP-2622 DDP Set Date-Time Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2025-11408HIGHD-Link DI-7001 MINI dbsrv.asp buffer overflowEPSS 0.9%CVE-2022-43628MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 0.9%CVE-2025-7790HIGHD-Link DI-8100 HTTP Request menu_nat.asp stack-based overflowEPSS 0.9%CVE-2026-15270HIGHD-link DIR-823G Web boa.conf least privilege violationEPSS 0.9%CVE-2026-5215MEDIUMD-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access controlEPSS 0.8%