D-Link
26 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2024-3273 |
Multiple NAS Devices | — | 1.0000 | 2024-04-11 | 2024-05-02 | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vul | |
CVE-2024-3272 |
Multiple NAS Devices | — | 0.9811 | 2024-04-11 | 2024-05-02 | D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credentia | |
CVE-2023-25280 |
DIR-820 Router | — | 0.9786 | 2024-09-30 | 2024-10-21 | D-Link DIR-820 routers contain an OS command injection vulnerability that allows | |
CVE-2022-26258 |
DIR-820L | — | 0.9163 | 2022-09-08 | 2022-09-29 | D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter i | |
CVE-2025-29635 |
DIR-823X | — | 0.8794 | 2026-04-24 | 2026-05-08 | D-Link DIR-823X contains a command injection vulnerability that allows an author | |
CVE-2024-0769 |
DIR-859 Router | — | 0.8271 | 2025-06-25 | 2025-07-16 | D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwi | |
CVE-2022-37055 |
Routers | — | 0.5553 | 2025-12-08 | 2025-12-29 | D-Link Routers contains a buffer overflow vulnerability that has a high impact o | |
CVE-2022-40799 |
DNR-322L | — | 0.3365 | 2025-08-05 | 2025-08-26 | D-Link DNR-322L contains a download of code without integrity check vulnerabilit | |
CVE-2020-25078 |
DCS-2530L and DCS-2670L Devices | — | — | 2025-08-05 | 2025-08-26 | D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability tha | |
CVE-2020-25079 |
DCS-2530L and DCS-2670L Devices | — | — | 2025-08-05 | 2025-08-26 | D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerabilit | |
CVE-2021-40655 |
DIR-605 Router | — | — | 2024-05-16 | 2024-06-06 | D-Link DIR-605 routers contain an information disclosure vulnerability that allo | |
CVE-2014-100005 |
DIR-600 Router | — | — | 2024-05-16 | 2024-06-06 | D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability | |
CVE-2016-20017 |
DSL-2750B Devices | — | — | 2024-01-08 | 2024-01-29 | D-Link DSL-2750B devices contain a command injection vulnerability that allows r | |
CVE-2019-17621 |
DIR-859 Router | — | — | 2023-06-29 | 2023-07-20 | D-Link DIR-859 router contains a command execution vulnerability in the UPnP end | |
CVE-2019-20500 |
DWL-2600AP Access Point | — | — | 2023-06-29 | 2023-07-20 | D-Link DWL-2600AP access point contains an authenticated command injection vulne | |
CVE-2018-6530 |
Multiple Routers | — | — | 2022-09-08 | 2022-09-29 | RW | Multiple D-Link routers contain an unspecified vulnerability that allows for exe |
CVE-2011-4723 |
DIR-300 Router | — | — | 2022-09-08 | 2022-09-29 | The D-Link DIR-300 router stores cleartext passwords, which allows context-depen | |
CVE-2019-16057 |
DNS-320 Storage Device | — | — | 2022-04-15 | 2022-05-06 | RW | The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code executio |
CVE-2021-45382 |
Multiple Routers | — | — | 2022-04-04 | 2022-04-25 | A remote code execution vulnerability exists in all series H/W revisions routers | |
CVE-2020-9377 |
DIR-610 Devices | — | — | 2022-03-25 | 2022-04-15 | D-Link DIR-610 devices allow remote code execution via the cmd parameter to comm | |
CVE-2019-16920 |
Multiple Routers | — | — | 2022-03-25 | 2022-04-15 | Multiple D-Link routers contain a command injection vulnerability which can allo | |
CVE-2016-11021 |
DCS-930L Devices | — | — | 2022-03-25 | 2022-04-15 | setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute | |
CVE-2013-5223 |
DSL-2760U | — | — | 2022-03-25 | 2022-04-15 | A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gatewa | |
CVE-2015-2051 |
DIR-645 Router | — | — | 2022-02-10 | 2022-08-10 | D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrar | |
CVE-2020-29557 |
DIR-825 R1 Devices | — | — | 2021-11-03 | 2022-05-03 | D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web int | |
CVE-2020-25506 |
DNS-320 Device | — | — | 2021-11-03 | 2022-05-03 | D-Link DNS-320 device contains a command injection vulnerability in the sytem_mg |