Dir-3040 Firmware (Dlink) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-05-23. Vendor: Dlink.

CVEs of Dir-3040 Firmware

CVE-2024-5298 - CVSS 8.8 (high), 2024-05-23: D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
CVE-2024-5294 - CVSS 6.5 (medium), 2024-05-23: D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a…
CVE-2023-41227 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41230 - CVSS 8.8 (high), 2024-05-03: D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41226 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41229 - CVSS 8.8 (high), 2024-05-03: D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41228 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41219 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers…
CVE-2023-41223 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41221 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41225 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41220 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41224 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41216 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent…
CVE-2023-41218 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers…
CVE-2023-41217 - CVSS 7.1 (high), 2024-05-03: D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41222 - CVSS 6.8 (medium), 2024-05-03: D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers…
CVE-2024-27619 - CVSS 7.3 (high), 2024-03-29: Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer…
CVE-2022-43648 - CVSS 8.8 (high), 2023-03-29: This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is…
CVE-2022-44832 - CVSS 9.8 (critical), 2022-12-14: D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function.
CVE-2022-1262 - CVSS 7.8 (high), 2022-04-11: A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as…
CVE-2021-21913 - CVSS 10 (critical), 2021-09-23: An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead…
CVE-2021-21820 - CVSS 10 (critical), 2021-07-16: A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can…
CVE-2021-21819 - CVSS 9.1 (critical), 2021-07-16: A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to…
CVE-2021-21817 - CVSS 7.5 (high), 2021-07-16: An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request…
CVE-2021-21816 - CVSS 6.5 (medium), 2021-07-16: An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the…
CVE-2021-21818 - CVSS 7.5 (high), 2021-07-16: A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can…