Dir-859 Firmware (Dlink) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-01-21. Vendor: Dlink.
CVEs of Dir-859 Firmware
- CVE-2024-0769 - CVSS 9.8 (critical), 2024-01-21: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown…
- CVE-2023-36092 - CVSS 9.8 (critical), 2023-07-31: Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This…
- CVE-2022-25106 - CVSS 5.5 (medium), 2022-03-04: D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a…
- CVE-2019-20217 - CVSS 9.8 (critical), 2020-01-29: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in…
- CVE-2019-20216 - CVSS 9.8 (critical), 2020-01-29: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in…
- CVE-2019-20215 - CVSS 9.8 (critical), 2020-01-29: D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in…
- CVE-2019-20213 - CVSS 7.5 (high), 2020-01-02: D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
- CVE-2019-17621 - CVSS 9.8 (critical), 2019-12-30: The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system…
