Dir-615 Firmware (Dlink) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2026-02-08. Vendor: Dlink.
CVEs of Dir-615 Firmware
- CVE-2026-2152 - CVSS 8.6 (high), 2026-02-08: A vulnerability was found in D-Link DIR-615 4.10. This vulnerability affects unknown code of the file adv_routing.php of the component Web Configuration…
- CVE-2026-2151 - CVSS 8.6 (high), 2026-02-08: A vulnerability has been found in D-Link DIR-615 4.10. This affects an unknown part of the file adv_firewall.php of the component DMZ Host Feature. Such…
- CVE-2026-1506 - CVSS 8.6 (high), 2026-01-28: A vulnerability was determined in D-Link DIR-615 4.10. Impacted is an unknown function of the file /adv_mac_filter.php of the component MAC Filter…
- CVE-2026-1505 - CVSS 8.6 (high), 2026-01-28: A vulnerability was found in D-Link DIR-615 4.10. This issue affects some unknown processing of the file /set_temp_nodes.php of the component URL Filter. The…
- CVE-2026-1448 - CVSS 8.6 (high), 2026-01-27: A vulnerability was detected in D-Link DIR-615 up to 4.10. This impacts an unknown function of the file /wiz_policy_3_machine.php of the component Web…
- CVE-2018-25115 - CVSS 10 (critical), 2025-08-27: Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability…
- CVE-2013-10050 - CVSS 8.8 (high), 2025-08-01: An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated…
- CVE-2024-0717 - CVSS 5.3 (medium), 2024-01-19: A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815,…
- CVE-2021-42627 - CVSS 9.8 (critical), 2022-08-23: The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose…
- CVE-2021-40654 - CVSS 6.5 (medium), 2021-09-24: An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the /…
- CVE-2021-37388 - CVSS 9.8 (critical), 2021-08-06: A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might…
- CVE-2019-17525 - CVSS 8.8 (high), 2020-04-21: The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.
- CVE-2019-19742 - CVSS 4.8 (medium), 2019-12-18: On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.
- CVE-2019-17353 - CVSS 8.2 (high), 2019-10-09: An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead…
- CVE-2019-16920 - CVSS 9.8 (critical), 2019-09-27: Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an…
- CVE-2018-15839 - CVSS 9.8 (critical), 2018-08-28: D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.
- CVE-2018-15875 - CVSS 6.1 (medium), 2018-08-25: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the…
- CVE-2018-15874 - CVSS 6.1 (medium), 2018-08-25: Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page…
- CVE-2014-8361 - CVSS 9.8 (critical), 2015-05-01: The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild…
