Vulnerabilidades em D-Link

786 resultados
Análise Vexday

Com 777 CVEs catalogadas e 57 surgidas nos últimos 90 dias, o portfólio de vulnerabilidades da D-Link apresenta um ritmo de descoberta que exige monitoramento contínuo. A taxa de exploração ativa está em linha com a média geral do catálogo, mas o destaque crítico é CVE-2024-3273, que possui EPSS máximo de 1.0 — indicando probabilidade extremamente alta de exploração ativa —, e deve ser tratada como prioridade absoluta de mitigação. A presença de 80 CVEs com PoC pública, combinada com 56 falhas de severidade crítica, amplia significativamente a superfície de ataque disponível para agentes mal-intencionados. O tipo de falha mais frequente, CWE-121 (stack-based buffer overflow), é historicamente associado à execução remota de código, o que reforça a urgência de aplicar correções e segmentar dispositivos D-Link expostos à rede.

CVE-2025-4443MEDIUMD-Link DIR-605L sub_454F2C command injectionEPSS 51.0%CVE-2017-3192—D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admiEPSS 39.5%CVE-2024-0921MEDIUMD-Link DIR-816 A2 Web Interface setDeviceSettings os command injectionEPSS 37.6%CVE-2023-5145MEDIUMD-Link DAR-7000 licence.php unrestricted uploadEPSS 34.3%CVE-2024-3274MEDIUMD-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosureEPSS 33.5%CVE-2023-5146MEDIUMD-Link DAR-7000/DAR-8000 updatelib.php unrestricted uploadEPSS 32.9%CVE-2023-5148MEDIUMD-Link DAR-7000/DAR-8000 uploadfile.php unrestricted uploadEPSS 30.7%CVE-2023-32152MEDIUMD-Link DIR-2640 HNAP LoginPassword Authentication Bypass VulnerabilityEPSS 28.9%CVE-2023-32148MEDIUMD-Link DIR-2640 HNAP PrivateLogin Authentication Bypass VulnerabilityEPSS 28.9%CVE-2024-13106MEDIUMD-Link DIR-816 A2 IP QoS form2IPQoSTcAdd access controlEPSS 27.2%CVE-2023-5147MEDIUMD-Link DAR-7000 updateos.php unrestricted uploadEPSS 26.6%CVE-2024-23624CRITICALD-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection VulnerabilityEPSS 26.0%CVE-2025-9769LOWD-Link DI-7400G+ mng_platform.asp sub_478D28 command injectionEPSS 25.9%CVE-2024-7715MEDIUMD-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injectionEPSS 25.1%CVE-2021-3708—D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the loEPSS 24.6%CVE-2024-8132MEDIUMD-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injectionEPSS 23.4%CVE-2023-32153MEDIUMD-Link DIR-2640 EmailFrom Command Injection Remote Code Execution VulnerabilityEPSS 23.4%CVE-2023-32150MEDIUMD-Link DIR-2640 PrefixLen Command Injection Remote Code Execution VulnerabilityEPSS 23.4%CVE-2024-8129MEDIUMD-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injectionEPSS 22.9%CVE-2024-23625CRITICALD-Link DAP-1650 SUBSCRIBE Callback Command Injection VulnerabilityEPSS 22.8%