DF
Product
Dir-860l Firmware
On CISA KEVExploited in the wildRansomware-linked
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 0Medium 5Low 0
Watch
Add Dir-860l Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6530 RansomwareIn wildKEV | 9.8 | Mar 6 | D-Link Multiple Routers OS Command Injection Vulnerability Affected: through 1.10b04 |
| CVE-2025-9026 | 9.8 | Aug 15 | A vulnerability was identified in D-Link DIR-860L 2.04.B04 Affected: 2.04.b04 |
| CVE-2024-42812 | 9.8 | Aug 19 | In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi Affected: 2.0.3 |
| CVE-2024-41611 | 9.8 | Jul 30 | In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform… Affected: 1.10b04 |
| CVE-2018-20114 | 9.8 | Jan 2 | On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an… Affected: 2.03.b03 |
| CVE-2024-37605 | 6.5 | Dec 17 | A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request Affected: 2.04.b04_ic5b |
| CVE-2020-25786 | 6.1 | Sep 19 | webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header Affected: 1.10b04 |
| CVE-2018-6529 | 6.1 | Mar 6 | XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous… Affected: through a1_fw110b04 |
| CVE-2018-6528 | 6.1 | Mar 6 | XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous… Affected: through a1_fw110b04 |
| CVE-2018-6527 | 6.1 | Mar 6 | XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and… Affected: through a1_fw110b04 |
Showing 10
