DF
Product
Dir-822 Firmware
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 6Medium 1Low 0
Watch
Add Dir-822 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-33343 | 8.8 | Apr 26 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell Affected: 1.05 |
| CVE-2018-20674 | 8.8 | Jan 9 | D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta… Affected: through 3.10b06 |
| CVE-2024-34950 | 7.5 | May 14 | D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module Affected: 1.05 |
| CVE-2024-33342 | 7.5 | Apr 26 | D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell Affected: 1.05 |
| CVE-2019-20213 | 7.5 | Jan 2 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php Affected: through 2.03b01; through 3.12b04 |
| CVE-2026-7067 | 7.3 | Apr 26 | D-Link DIR-822 udhcpd DHCP Service dhcpd.c system command injection Affected: 1.0.1 |
Showing 6