DF
Product
Dir-822 Firmware
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 6Medium 1Low 0
Watch
Add Dir-822 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17621 In wildKEV | 9.8 | Dec 30 | D-Link DIR-859 Router Command Execution Vulnerability Affected: through 2.03b01; through 3.12b04 |
| CVE-2024-33344 | 9.8 | Apr 26 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of upload_firmware.cgi, which allows remote attackers to execute arbitrary commands via shell Affected: 1.05 |
| CVE-2023-51987 | 9.8 | Jan 11 | D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords Affected: 1.0.2 |
| CVE-2023-51984 | 9.8 | Jan 11 | D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function Affected: 1.0.2 |
| CVE-2018-19989 | 9.8 | May 13 | In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices Affected: 3.10b06 |
| CVE-2018-19987 | 9.8 | May 13 | D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices… Affected: 3.10b06 |
| CVE-2018-20675 | 9.8 | Jan 9 | D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta… Affected: through 3.10b06 |
| CVE-2016-6563 | 9.8 | Jul 13 | Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers Affected: All versions, or not specified |
| CVE-2016-5681 | 9.8 | Aug 25 | Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823… Affected: 3.01 |
| CVE-2024-33343 | 8.8 | Apr 26 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell Affected: 1.05 |
| CVE-2018-20674 | 8.8 | Jan 9 | D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta… Affected: through 3.10b06 |
| CVE-2024-34950 | 7.5 | May 14 | D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module Affected: 1.05 |
| CVE-2024-33342 | 7.5 | Apr 26 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell Affected: 1.05 |
| CVE-2019-20213 | 7.5 | Jan 2 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php Affected: through 2.03b01; through 3.12b04 |
| CVE-2026-7067 | 7.3 | Apr 26 | D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection Affected: 1.0.1 |
| CVE-2024-0717 | 5.3 | Jan 19 | A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S,… Affected: through 2024-01-12 |
Showing 16