Login Request a demo
DF
Product
Dir-845l Firmware
by Dlink · last CVE May 6, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 5High 2Medium 2Low 0
Severity
All severities9Critical5High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dir-845l Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-38557
9.8
1%
Aug 28
D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh
Affected: 1.0.0 through 1.0.3
CVE-2022-36756
9.8
3%
Aug 28
DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php
Affected: 1.0.0 through 1.0.3
CVE-2022-36755
9.8
1%
Aug 28
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php
Affected: 1.0.0 through 1.0.3
CVE-2024-33110
9.1
1%
May 6
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component
Affected: through 1.01krb03
CVE-2024-29385
9.0
2%
Mar 22
DIR-845L router <= v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgi_main function
Affected: through 1.01krb03
CVE-2024-29366
8.8
2%
Mar 22
A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03
Affected: through 1.01krb03
CVE-2024-33112
7.5
6%
May 6
D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func
Affected: through 1.01krb03
CVE-2024-33111
5.4
1%
May 6
D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php
Affected: through 1.01krb03
CVE-2024-33113
5.3
3%
May 6
D-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php
Affected: through 1.01krb03
Showing 9