Dir-815 Firmware (Dlink) - vulnerabilities (CVEs)

15 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2025-08-27. Vendor: Dlink.

CVEs of Dir-815 Firmware

CVE-2018-25115 - CVSS 10 (critical), 2025-08-27: Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability…
CVE-2025-6328 - CVSS 8.8 (high), 2025-06-20: A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi.…
CVE-2024-22651 - CVSS 9.8 (critical), 2024-01-24: There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.
CVE-2024-0717 - CVSS 5.3 (medium), 2024-01-19: A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815,…
CVE-2023-51123 - CVSS 9.8 (critical), 2024-01-10: An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in…
CVE-2023-37758 - CVSS 7.5 (high), 2023-07-18: D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.
CVE-2020-25786 - CVSS 6.1 (medium), 2020-09-19: webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects…
CVE-2018-10108 - CVSS 6.1 (medium), 2018-04-16: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to…
CVE-2018-10107 - CVSS 6.1 (medium), 2018-04-16: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php.
CVE-2018-10106 - CVSS 9.8 (critical), 2018-04-16: D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in…
CVE-2015-0150 - CVSS 9.8 (critical), 2018-04-12: The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via…
CVE-2015-0153 - CVSS 7.5 (high), 2018-04-12: D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.
CVE-2014-8888 - CVSS 9.8 (critical), 2018-04-12: The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors…
CVE-2015-0152 - CVSS 9.8 (critical), 2018-04-12: D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the…
CVE-2015-0151 - CVSS 8.8 (high), 2018-04-12: Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication…