Dir-615 (Dlink) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2025-08-27. Vendor: Dlink.

CVEs of Dir-615

• CVE-2018-25115 - CVSS 10 (critical), 2025-08-27: Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability…
• CVE-2017-11436 - CVSS 9.8 (critical), 2017-07-19: D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET…
• CVE-2017-7406 - CVSS 9.8 (critical), 2017-07-07: The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages. Also, it doesn't allow the user to generate his own SSL…
• CVE-2017-7405 - CVSS 9.8 (critical), 2017-07-07: On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user based on the IP address of his machine. By spoofing the IP…
• CVE-2017-7404 - CVSS 8.8 (high), 2017-07-07: On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious…
• CVE-2009-4821 - CVSS 5 (medium), 2010-04-27: The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to (1) change the admin…