Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

11 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-44335	Aplazada	Alta (8.8)	12%	—	Dlink Di-7003g^AI Dlink Di-7003gv2^AI Dlink Di-7100g+v2^AI Dlink Di-7100gv2^AI+3	9/9/2024	17/6/2026	D-Link DI-7003G v19.12.24A1, DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution (RCE) via version_upgrade.asp.
CVE-2024-44334	Aplazada	Alta (8.8)	32%	—	Dlink Di-7003gv2^AI Dlink Di-7100g+v2^AI Dlink Di-7100gv2^AI Dlink Di-7200gv2^AI+2	9/9/2024	17/6/2026	D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution due to insufficient parameter filtering in the CGI handling function of upgrade_filter.asp.
CVE-2024-44333	Aplazada	Alta (8.8)	12%	—	Dlink Di-7003gv2^AI Dlink Di-7100g+v2^AI Dlink Di-7100gv2^AI Dlink Di-7200gv2^AI+2	9/9/2024	17/6/2026	D-Link DI-7003GV2 v24.04.18D1, DI-7100G+V2 v24.04.18D1, DI-7100GV2 v24.04.18D1, DI-7200GV2 v24.04.18E1, DI-7300G+V2 v24.04.18D1, and DI-7400G+V2 v24.04.18D1 are vulnerable to Remote Command Execution. An attacker can achieve arbitrary command execution by sending a carefully crafted malicious string to the CGI…
CVE-2021-46233	Modificada	Crítica (9.8)	3.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm. This vulnerability allows attackers to execute arbitrary commands via the cmd parameter.
CVE-2021-46232	Modificada	Crítica (9.8)	3.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter.
CVE-2021-46231	Modificada	Crítica (9.8)	3.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp. This vulnerability allows attackers to execute arbitrary commands via the url_en parameter.
CVE-2021-46230	Modificada	Crítica (9.8)	3.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters.
CVE-2021-46229	Modificada	Crítica (9.8)	4.4%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter.
CVE-2021-46228	Modificada	Crítica (9.8)	3.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter.
CVE-2021-46227	Modificada	Crítica (9.8)	4.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows attackers to execute arbitrary commands via the proxy_srv, proxy_srvport, proxy_lanip, proxy_lanport parameters.
CVE-2021-46226	Modificada	Crítica (9.8)	3.7%	—	Dlink Di-7200gv2 Firmware	4/2/2022	17/6/2026	D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter.