Dir 878 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Dir 878 Firmware

by Dlink · last CVE Nov 13, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities41 In the news0 Timeline

Severity mix

Critical 12High 24Medium 5Low 0

Severity

All severities41 Critical12 High24 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Dir 878 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-27720	9.8	1%	Apr 9	D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function Affected: 1.30b08
CVE-2023-24800	9.8	1%	Apr 7	D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function Affected: 1.20b05
CVE-2023-24799	9.8	1%	Apr 7	D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function Affected: 1.20b05
CVE-2023-24798	9.8	1%	Apr 7	D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function Affected: 1.20b05
CVE-2022-48108	9.8	3%	Jan 27	D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask Affected: 1.30b08
CVE-2022-48107	9.8	3%	Jan 27	D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress Affected: 1.30b08
CVE-2022-44801	9.8	1%	Nov 22	D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control Affected: 1.02b05
CVE-2022-44202	9.8	1%	Nov 22	D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow Affected: 1.02b04; 1.02b05
CVE-2022-43184	9.8	2%	Oct 19	D-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi Affected: 1.30b08
CVE-2021-44882	9.8	5%	Feb 4	D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function Affected: through 1.20b05; 1.30b08
CVE-2021-44880	9.8	4%	Feb 4	D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function Affected: through 1.20b05; 1.30b08
CVE-2021-30072	9.8	1%	Apr 2	An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices Affected: through 1.30b08
CVE-2022-41140	8.8	1%	Jan 26	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers Affected: through 1.30b06
CVE-2022-26670	8.8	2%	Apr 7	D-Link DIR-878 has inadequate filtering for special characters in the webpage input field Affected: through 1.20b05
CVE-2020-8864	8.8	82%	Mar 23	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 Affected: through 1.20b03
CVE-2020-8863	8.8	78%	Mar 23	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04 Affected: through 1.20b03
CVE-2019-8317	8.8	6%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8313	8.8	6%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8314	8.8	6%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8315	8.8	6%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8316	8.8	7%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8312	8.8	7%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8318	8.8	6%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2019-8319	8.8	8%	Feb 13	An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1 Affected: 1.12a1
CVE-2024-48638	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SubnetMask parameter in the SetGuestZoneRouterSettings… Affected: 1.30b08
CVE-2024-48637	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:1/VID parameter in the SetVLANSettings function Affected: 1.30b08
CVE-2024-48636	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:0/VID parameter in the SetVLANSettings function Affected: 1.30b08
CVE-2024-48635	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the VLANID:2/VID parameter in the SetVLANSettings function Affected: 1.30b08
CVE-2024-48634	8.0	18%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the key parameter in the SetWLanRadioSecurity function Affected: 1.30b08
CVE-2024-48633	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the ExternalPort, InternalPort, ProtocolNumber, and… Affected: 1.30b08
CVE-2024-48632	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain multiple command injection vulnerabilities via the LocalIPAddress, TCPPorts, and UDPPorts… Affected: 1.30b08
CVE-2024-48631	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the SSID parameter in the SetWLanRadioSettings function Affected: 1.30b08
CVE-2024-48630	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the MacAddress parameter in the SetMACFilters2 function Affected: 1.30b08
CVE-2024-48629	8.0	2%	Oct 17	D-Link DIR_882_FW130B06 and DIR_878 DIR_878_FW130B08 were discovered to contain a command injection vulnerability via the IPAddress parameter in the SetGuestZoneRouterSettings… Affected: 1.30b08
CVE-2022-1262	7.8	2%	Apr 11	A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root Affected: 1.20b05; 1.30b08
CVE-2025-0481	7.5	1%	Jan 15	A vulnerability classified as problematic has been found in D-Link DIR-878 1.03 Affected: 1.03
CVE-2025-60674	6.8	1%	Nov 13	A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module Affected: 1.01b04
CVE-2025-60676	6.5	3%	Nov 13	An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin Affected: 1.01b04
CVE-2025-60673	6.5	4%	Nov 13	An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin Affected: 1.01b04
CVE-2025-60672	6.5	4%	Nov 13	An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin Affected: 1.01b04
CVE-2024-0717	5.3	18%	Jan 19	A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S,… Affected: through 2024-01-12