Dsp-w215 Firmware (Dlink) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2025-07-25. Vendor: Dlink.

CVEs of Dsp-w215 Firmware

• CVE-2014-125117 - CVSS 9.8 (critical), 2025-07-25: A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a…
• CVE-2025-34125 - CVSS 9.3 (critical), 2025-07-16: An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version…
• CVE-2021-29295 - CVSS 7.5 (high), 2021-08-10: Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd.…
• CVE-2020-13136 - CVSS 7.5 (high), 2020-05-18: D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.
• CVE-2020-13135 - CVSS 6.5 (medium), 2020-05-18: D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy.
• CVE-2014-3936 - CVSS 10 (critical), 2014-06-02: Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware…