Dir-816 Firmware (Dlink) - vulnerabilities (CVEs)

73 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-05-12. Vendor: Dlink.

CVEs of Dir-816 Firmware

CVE-2026-8346 - CVSS 8.8 (high), 2026-05-12: A vulnerability was detected in D-Link DIR-816 1.10CNB05_R1B011D88210. This affects the function portForward. Performing a manipulation of the argument…
CVE-2026-8345 - CVSS 8.8 (high), 2026-05-11: A security vulnerability has been detected in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this issue is the function sub_445E7C of the file…
CVE-2026-8344 - CVSS 8.8 (high), 2026-05-11: A weakness has been identified in D-Link DIR-816 1.10CNB05_R1B011D88210. Affected by this vulnerability is the function sub_445E7C of the file…
CVE-2026-4184 - CVSS 9.8 (critical), 2026-03-16: A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an unknown functionality of the file…
CVE-2026-4183 - CVSS 9.8 (critical), 2026-03-16: A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file /goform/form2WlanBasicSetup.cgi of the…
CVE-2026-4182 - CVSS 9.8 (critical), 2026-03-16: A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component…
CVE-2026-4181 - CVSS 9.8 (critical), 2026-03-16: A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component…
CVE-2026-4180 - CVSS 9.8 (critical), 2026-03-16: A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The…
CVE-2025-60679 - CVSS 8.8 (high), 2025-11-13: A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which…
CVE-2025-61577 - CVSS 7.5 (high), 2025-10-09: D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function. This…
CVE-2025-45931 - CVSS 9.8 (critical), 2025-06-30: An issue D-Link DIR-816-A2 DIR-816A2_FWv1.10CNB05_R1B011D88210 allows a remote attacker to execute arbitrary code via system() function in the bin/goahead file
CVE-2025-5630 - CVSS 9.8 (critical), 2025-06-05: A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file…
CVE-2025-5624 - CVSS 9.8 (critical), 2025-06-05: A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file…
CVE-2025-5623 - CVSS 9.8 (critical), 2025-06-05: A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file…
CVE-2025-5620 - CVSS 9.8 (critical), 2025-06-05: A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setipsec_config of the file…
CVE-2025-5622 - CVSS 9.8 (critical), 2025-06-05: A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file…
CVE-2025-5621 - CVSS 9.8 (critical), 2025-06-05: A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the…
CVE-2025-29743 - CVSS 6.5 (medium), 2025-04-22: D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting.
CVE-2025-1392 - CVSS 5.4 (medium), 2025-02-17: A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file…
CVE-2024-57678 - CVSS 6.5 (medium), 2025-01-16: An access control issue in the component form2WlAc.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G mac…
CVE-2024-57681 - CVSS 5.3 (medium), 2025-01-16: An access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the agl service of the…
CVE-2024-57684 - CVSS 9.8 (critical), 2025-01-16: An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the…
CVE-2024-57677 - CVSS 6.5 (medium), 2025-01-16: An access control issue in the component form2Wan.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the wan service of the…
CVE-2024-57680 - CVSS 5.3 (medium), 2025-01-16: An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the port…
CVE-2024-57683 - CVSS 4.3 (medium), 2025-01-16: An access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the filter…
CVE-2024-57679 - CVSS 6.5 (medium), 2025-01-16: An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and…
CVE-2024-57682 - CVSS 6.5 (medium), 2025-01-16: An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to access…
CVE-2024-57676 - CVSS 6.5 (medium), 2025-01-16: An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G…
CVE-2024-13108 - CVSS 6.9 (medium), 2025-01-02: A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file…
CVE-2024-13107 - CVSS 6.9 (medium), 2025-01-02: A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. It has been classified as critical. This affects an unknown part of the file…
CVE-2024-13106 - CVSS 6.9 (medium), 2025-01-02: A vulnerability was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this issue is some unknown functionality of the…
CVE-2024-13105 - CVSS 6.9 (medium), 2025-01-02: A vulnerability has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210 and classified as critical. Affected by this vulnerability is an unknown…
CVE-2024-13104 - CVSS 6.9 (medium), 2025-01-02: A vulnerability, which was classified as critical, was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. Affected is an unknown function of the file…
CVE-2024-13103 - CVSS 6.9 (medium), 2025-01-02: A vulnerability, which was classified as critical, has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This issue affects some unknown processing of…
CVE-2024-13102 - CVSS 6.9 (medium), 2025-01-02: A vulnerability classified as critical was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This vulnerability affects unknown code of the file /goform/DDNS…
CVE-2023-24331 - CVSS 9.8 (critical), 2024-02-21: Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd…
CVE-2024-24321 - CVSS 9.8 (critical), 2024-02-08: An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4_ssid_2 parameter in the sub_42DA54 function.
CVE-2024-0717 - CVSS 5.3 (medium), 2024-01-19: A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815,…
CVE-2023-39637 - CVSS 9.8 (critical), 2023-09-12: D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis.
CVE-2022-43003 - CVSS 9.8 (critical), 2022-10-26: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.
CVE-2022-43002 - CVSS 9.8 (critical), 2022-10-26: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.
CVE-2022-43001 - CVSS 9.8 (critical), 2022-10-26: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.
CVE-2022-43000 - CVSS 9.8 (critical), 2022-10-26: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.
CVE-2022-42999 - CVSS 7.5 (high), 2022-10-26: D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm.
CVE-2022-42998 - CVSS 9.8 (critical), 2022-10-26: D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at /goform/form2IPQoSTcAdd.
CVE-2022-36619 - CVSS 7.5 (high), 2022-08-31: In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC.
CVE-2022-37130 - CVSS 9.8 (critical), 2022-08-31: In D-Link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img a command injection vulnerability occurs in /goform/Diagnosis, after the condition is met,…
CVE-2022-37129 - CVSS 8.8 (high), 2022-08-31: D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be…
CVE-2022-37123 - CVSS 8.8 (high), 2022-08-31: D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.
CVE-2022-37125 - CVSS 9.8 (critical), 2022-08-31: D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost.
CVE-2022-36620 - CVSS 7.5 (high), 2022-08-31: D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.
CVE-2022-37128 - CVSS 9.8 (critical), 2022-08-31: In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.
CVE-2022-37134 - CVSS 9.8 (critical), 2022-08-22: D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tp_usrname will be decrypted by base64, and…
CVE-2022-37133 - CVSS 7.5 (high), 2022-08-22: D-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when…
CVE-2022-29321 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.
CVE-2022-29324 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.
CVE-2022-29327 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.
CVE-2022-28915 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm.
CVE-2022-29323 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.
CVE-2022-29326 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter.
CVE-2022-29322 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.
CVE-2022-29325 - CVSS 9.8 (critical), 2022-05-10: D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter.
CVE-2021-31326 - CVSS 9.8 (critical), 2022-03-24: D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi.
CVE-2021-39510 - CVSS 9.8 (critical), 2021-08-24: An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of…
CVE-2021-39509 - CVSS 9.8 (critical), 2021-08-24: An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of…
CVE-2021-27114 - CVSS 9.8 (critical), 2021-04-14: An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for…
CVE-2021-27113 - CVSS 9.8 (critical), 2021-04-14: An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of…
CVE-2021-26810 - CVSS 9.8 (critical), 2021-03-30: D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the…
CVE-2019-7642 - CVSS 7.5 (high), 2019-03-25: D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs…
CVE-2019-10041 - CVSS 9.8 (critical), 2019-03-25: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an…
CVE-2019-10040 - CVSS 9.8 (critical), 2019-03-25: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use a…
CVE-2019-10039 - CVSS 9.8 (critical), 2019-03-25: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an…
CVE-2019-10042 - CVSS 7.5 (high), 2019-03-25: The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dir_login.asp and use an…