Dlink
Dlink Dap-1650 Firmware: vulnerabilidades y CVE
Dlink Dap-1650 Firmware tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 6 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas6
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-40505 | Crítica (9.3) | 0.43% | — | 16 jul 2024 | Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component. |
| CVE-2024-23625 | Crítica (9.8) | 23% | — | 26 ene 2024 | A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. |
| CVE-2024-23624 | Crítica (9.8) | 26% | — | 26 ene 2024 | A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. |
| CVE-2022-36588 | Crítica (9.8) | 1.9% | — | 8 sept 2022 | In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy. |
| CVE-2019-12768 | Crítica (9.8) | 2.3% | — | 30 dic 2020 | An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing. |
| CVE-2019-12767 | Crítica (9.8) | 2.1% | — | 21 mar 2020 | An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands. |