DF
Product
Dir-815 Firmware
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 4Medium 4Low 0
Watch
Add Dir-815 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-25115 | 9.8 | Aug 27 | D-Link DIR-110/412/600/615/645/815 RCE via service.cgi Affected: 1.03 |
| CVE-2024-22651 | 9.8 | Jan 24 | There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04 Affected: through 1.04 |
| CVE-2023-51123 | 9.8 | Jan 10 | An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main… Affected: 1.01ssb08.bin |
| CVE-2018-10106 | 9.8 | Apr 16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in /htdocs/web/getcfg.php, as… Affected: through 2.07.b01 |
| CVE-2015-0152 | 9.8 | Apr 12 | D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password Affected: before 2.07.b01 |
| CVE-2015-0150 | 9.8 | Apr 12 | The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors Affected: before 2.07.b01 |
| CVE-2014-8888 | 9.8 | Apr 12 | The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP… Affected: 2.03.b02 |
| CVE-2025-6328 | 8.8 | Jun 20 | D-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow Affected: 1.0.1 |
| CVE-2015-0151 | 8.8 | Apr 12 | Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for… Affected: before 2.07.b01 |
| CVE-2023-37758 | 7.5 | Jul 18 | D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi Affected: 1.0.1 |
| CVE-2015-0153 | 7.5 | Apr 12 | D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key Affected: before 2.07.b01 |
| CVE-2020-25786 | 6.1 | Sep 19 | webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header Affected: 2.07.b01 |
| CVE-2018-10108 | 6.1 | Apr 16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to /htdocs/webinc/js/bsc_sms_inbox.php Affected: through 2.07.b01 |
| CVE-2018-10107 | 6.1 | Apr 16 | D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php Affected: through 2.07.b01 |
| CVE-2024-0717 | 5.3 | Jan 19 | D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure Affected: through 2024-01-12 |
Showing 15
