Login Request a demo
DF
Product
Dir-859 Firmware
by Dlink · last CVE Jan 21, 2024
On CISA KEVExploited in the wild
8
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 6High 1Medium 1Low 0
Severity
All severities8Critical6High1Medium1Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Dir-859 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-0769
In wildKEV
9.8
83%
Jan 21
D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
Affected: 1.06
CVE-2019-17621
In wildKEV
9.8
91%
Dec 30
D-Link DIR-859 Router Command Execution Vulnerability
Affected: through 1.05b03; 1.06b01
CVE-2023-36092
9.8
2%
Jul 31
Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main
Affected: 1.05b03
CVE-2019-20217
9.8
4%
Jan 29
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because…
Affected: 1.05; 1.06b01
CVE-2019-20216
9.8
4%
Jan 29
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because…
Affected: 1.05; 1.06b01
CVE-2019-20215
9.8
75%
Jan 29
D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because…
Affected: 1.05; 1.06b01
CVE-2019-20213
7.5
2%
Jan 2
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php
Affected: through 1.05b03; 1.06b01
CVE-2022-25106
5.5
9%
Mar 4
D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main
Affected: 1.05
Showing 8