DF
Product
Dir-865l Firmware
On CISA KEVExploited in the wildRansomware-linked
16
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 5Low 0
Watch
Add Dir-865l Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17621 In wildKEV | 9.8 | Dec 30 | D-Link DIR-859 Router Command Execution Vulnerability Affected: through 1.07b01 |
| CVE-2018-6530 RansomwareIn wildKEV | 9.8 | Mar 6 | D-Link Multiple Routers OS Command Injection Vulnerability Affected: through 1.08b01 |
| CVE-2013-4857 | 9.8 | Oct 25 | D-Link DIR-865L has PHP File Inclusion in the router xml file Affected: All versions, or not specified |
| CVE-2020-13786 | 8.8 | Jun 3 | D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF Affected: 1.20b01 |
| CVE-2020-13782 | 8.8 | Jun 3 | D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection Affected: 1.20b01 |
| CVE-2013-4855 | 8.8 | Oct 25 | D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share Affected: All versions, or not specified |
| CVE-2020-13787 | 7.5 | Jun 3 | D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information Affected: 1.20b01 |
| CVE-2020-13785 | 7.5 | Jun 3 | D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength Affected: 1.20b01 |
| CVE-2020-13784 | 7.5 | Jun 3 | D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator Affected: 1.20b01 |
| CVE-2020-13783 | 7.5 | Jun 3 | D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information Affected: 1.20b01 |
| CVE-2019-20213 | 7.5 | Jan 2 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php Affected: through 1.07b01 |
| CVE-2013-4856 | 6.5 | Oct 25 | D-Link DIR-865L has Information Disclosure Affected: All versions, or not specified |
| CVE-2020-25786 | 6.1 | Sep 19 | webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header Affected: 1.08b01 |
| CVE-2018-6529 | 6.1 | Mar 6 | XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous… Affected: through reva_firmware_patch_1.08.b01 |
| CVE-2018-6528 | 6.1 | Mar 6 | XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous… Affected: through reva_firmware_patch_1.08.b01 |
| CVE-2018-6527 | 6.1 | Mar 6 | XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and… Affected: through reva_firmware_patch_1.08.b01 |
Showing 16
