Vulnerabilidades en D-Link

778 resultados
Análisis Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2023-34274HIGHD-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass VulnerabilityEPSS 1.1%CVE-2023-34282HIGHD-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass VulnerabilityEPSS 1.1%CVE-2023-32142HIGHD-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-32146HIGHD-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2023-32141HIGHD-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.1%CVE-2026-7554MEDIUMD-Link M60 httpd password recoveryEPSS 1.1%CVE-2022-41140HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. AuthentEPSS 1.1%CVE-2022-3210HIGHThis vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routerEPSS 1.1%CVE-2022-43628MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43624MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43627MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43629MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43632MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43626MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43631MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43633MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2022-43623MEDIUMThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. AlEPSS 1.1%CVE-2025-6115HIGHD-Link DIR-619L form_macfilter stack-based overflowEPSS 1.1%CVE-2025-6114HIGHD-Link DIR-619L form_portforwarding stack-based overflowEPSS 1.1%CVE-2026-4182CRITICALD-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflowEPSS 1.1%