DF
Product
Dir-615 Firmware
On CISA KEVExploited in the wild
19
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 8Medium 5Low 0
Watch
Add Dir-615 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16920 In wildKEV | 9.8 | Sep 27 | D-Link Multiple Routers Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2014-8361 In wildKEV | 9.8 | May 1 | Realtek SDK Improper Input Validation Vulnerability Affected: 10.01b02; through 6.06b03 |
| CVE-2018-25115 | 9.8 | Aug 27 | D-Link DIR-110/412/600/615/645/815 RCE via service.cgi Affected: All versions, or not specified |
| CVE-2021-42627 | 9.8 | Aug 23 | The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about… Affected: 20.06 |
| CVE-2021-37388 | 9.8 | Aug 6 | A buffer overflow in D-Link DIR-615 C2 3.03WW Affected: 3.03ww |
| CVE-2018-15839 | 9.8 | Aug 28 | D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header Affected: All versions, or not specified |
| CVE-2013-10050 | 8.8 | Aug 1 | D-Link Devices tools_vct.xgi Authenticated RCE Affected: through 4.13 |
| CVE-2019-17525 | 8.8 | Apr 21 | The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks Affected: 20.10 |
| CVE-2019-17353 | 8.2 | Oct 9 | An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07 Affected: 20.05; 20.07 |
| CVE-2026-2152 | 7.2 | Feb 8 | D-Link DIR-615 Web Configuration adv_routing.php os command injection Affected: 4.10 |
| CVE-2026-2151 | 7.2 | Feb 8 | D-Link DIR-615 DMZ Host Feature adv_firewall.php os command injection Affected: 4.10 |
| CVE-2026-1506 | 7.2 | Jan 28 | D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection Affected: 4.10 |
| CVE-2026-1505 | 7.2 | Jan 28 | D-Link DIR-615 URL Filter set_temp_nodes.php os command injection Affected: 4.10 |
| CVE-2026-1448 | 7.2 | Jan 26 | D-Link DIR-615 Web Management wiz_policy_3_machine.php os command injection Affected: through 4.10 |
| CVE-2021-40654 | 6.5 | Sep 24 | An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt Affected: 17.00 |
| CVE-2018-15875 | 6.1 | Aug 25 | Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an… Affected: 20.07 |
| CVE-2018-15874 | 6.1 | Aug 25 | Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname… Affected: 20.07 |
| CVE-2024-0717 | 5.3 | Jan 19 | A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S,… Affected: through 2024-01-12 |
| CVE-2019-19742 | 4.8 | Dec 18 | On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field Affected: 20.07 |
Showing 19