Dir-300 Firmware (Dlink) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2025-08-05. Vendor: Dlink.

CVEs of Dir-300 Firmware

• CVE-2013-10069 - CVSS 10 (critical), 2025-08-05: The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection…
• CVE-2013-10050 - CVSS 8.8 (high), 2025-08-01: An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated…
• CVE-2013-10048 - CVSS 9.8 (critical), 2025-08-01: An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01,…
• CVE-2024-41616 - CVSS 9.8 (critical), 2024-08-06: D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.
• CVE-2024-0717 - CVSS 5.3 (medium), 2024-01-19: A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815,…
• CVE-2023-31814 - CVSS 9.8 (critical), 2023-05-23: D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.
• CVE-2013-7471 - CVSS 9.8 (critical), 2019-06-11: An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B,…
• CVE-2011-4723 - CVSS 5.7 (medium), 2011-12-20: The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.