Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-40505	Analizada	Crítica (9.3)	0.43%	—	Dlink Dap-1650 Firmware	16/7/2024	17/6/2026	Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component.
CVE-2024-23625	Modificada	Crítica (9.8)	23%	—	Dlink Dap-1650 Firmware	26/1/2024	17/6/2026	A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
CVE-2024-23624	Modificada	Crítica (9.8)	26%	—	Dlink Dap-1650 Firmware	26/1/2024	17/6/2026	A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
CVE-2022-36588	Modificada	Crítica (9.8)	1.9%	—	Dlink Dap-1650 Firmware	8/9/2022	17/6/2026	In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.
CVE-2019-12768	Modificada	Crítica (9.8)	2.3%	—	Dlink Dap-1650 Firmware	30/12/2020	17/6/2026	An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.
CVE-2019-12767	Modificada	Crítica (9.8)	2.1%	—	Dlink Dap-1650 Firmware	21/3/2020	17/6/2026	An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands.