Dir-806 Firmware (Dlink) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-05-06. Vendor: Dlink.

CVEs of Dir-806 Firmware

• CVE-2025-4340 - CVSS 9.8 (critical), 2025-05-06: A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file…
• CVE-2023-43130 - CVSS 9.8 (critical), 2023-09-22: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection.
• CVE-2023-43129 - CVSS 9.8 (critical), 2023-09-22: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters.
• CVE-2023-43128 - CVSS 9.8 (critical), 2023-09-21: D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters.
• CVE-2019-10892 - CVSS 9.8 (critical), 2019-09-06: An issue was discovered in D-Link DIR-806 devices. There is a stack-based buffer overflow in function hnap_main at /htdocs/cgibin. The function will call…
• CVE-2019-10891 - CVSS 9.8 (critical), 2019-09-06: An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter…