Dir-895l Firmware (Dlink) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2023-07-31. Vendor: Dlink.

CVEs of Dir-895l Firmware

• CVE-2023-36091 - CVSS 9.8 (critical), 2023-07-31: Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin.…
• CVE-2019-20213 - CVSS 7.5 (high), 2020-01-02: D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
• CVE-2019-17621 - CVSS 9.8 (critical), 2019-12-30: The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system…
• CVE-2017-14948 - CVSS 9.8 (critical), 2019-10-14: Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code…
• CVE-2019-16190 - CVSS 9.8 (critical), 2019-09-09: SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as…
• CVE-2016-6563 - CVSS 9.8 (critical), 2018-07-13: Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML…