Vulnerabilidades em D-Link

823 resultados
Análise Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2024-13103MEDIUMD-Link DIR-816 A2 Virtual Service form2AddVrtsrv.cgi access controlEPSS 0.8%CVE-2021-34862HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routerEPSS 0.8%CVE-2021-34861HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routerEPSS 0.8%CVE-2025-13190HIGHD-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflowEPSS 0.8%CVE-2022-43619MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 0.8%CVE-2025-13304HIGHD-Link DWR-M920/DWR-M921/DWR-M960/DWR-M961/DIR-825M formPingDiagnosticRun buffer overflowEPSS 0.8%CVE-2025-4860MEDIUMD-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scriptingEPSS 0.8%CVE-2025-4858MEDIUMD-Link DAP-2695 ARP Spoofing Prevention Page adv_arpspoofing.php cross site scriptingEPSS 0.8%CVE-2025-4903MEDIUMD-Link DI-7003GV2 webgl.asp sub_41F4F0 unverified password changeEPSS 0.8%CVE-2024-13105MEDIUMD-Link DIR-816 A2 DHCPD Setting form2Dhcpd.cgi access controlEPSS 0.8%CVE-2024-13102MEDIUMD-Link DIR-816 A2 DDNS Service access controlEPSS 0.8%CVE-2026-4211HIGHD-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflowEPSS 0.8%CVE-2026-4212HIGHD-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflowEPSS 0.8%CVE-2026-4214HIGHD-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflowEPSS 0.8%CVE-2025-13548HIGHD-Link DIR-822K/DWR-M920 formFirewallAdv buffer overflowEPSS 0.8%CVE-2025-15190HIGHD-Link DWR-M920 formFilter sub_42261C stack-based overflowEPSS 0.8%CVE-2025-15189HIGHD-Link DWR-M920 formDefRoute sub_464794 buffer overflowEPSS 0.8%CVE-2025-15193HIGHD-Link DWR-M920 formParentControl sub_423848 buffer overflowEPSS 0.8%CVE-2025-13607CRITICALD-Link CCTV camera model DCS-F5614-L1 Missing Authentication for Critical FunctionEPSS 0.8%CVE-2026-5984HIGHD-Link DIR-605L POST Request formSetLog buffer overflowEPSS 0.8%