Dlink
Dlink Dir-3040 Firmware: vulnerabilidades y CVE
Dlink Dir-3040 Firmware tiene 25 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE25
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-5294 | Media (6.5) | 0.46% | — | 23 may 2024 | D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of D-Link… |
| CVE-2023-41230 | Alta (8.8) | 0.96% | — | 3 may 2024 | D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations… |
| CVE-2023-41229 | Alta (8.8) | 1.0% | — | 3 may 2024 | D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41228 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41227 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations… |
| CVE-2023-41226 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations… |
| CVE-2023-41225 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41224 | Media (6.8) | 0.87% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41223 | Media (6.8) | 0.87% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations… |
| CVE-2023-41221 | Media (6.8) | 0.87% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41220 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41219 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link… |
| CVE-2023-41218 | Media (6.8) | 0.87% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41217 | Alta (7.1) | 0.75% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected… |
| CVE-2023-41216 | Media (6.8) | 0.90% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2023-41222 | Media (6.8) | 0.87% | — | 3 may 2024 | D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of… |
| CVE-2022-43648 | Alta (8.8) | 0.91% | — | 29 mar 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific… |
| CVE-2022-44832 | Crítica (9.8) | 4.0% | — | 14 dic 2022 | D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function. |
| CVE-2022-1262 | Alta (7.8) | 2.2% | — | 11 abr 2022 | A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root. |
| CVE-2021-21913 | Crítica (9.8) | 2.2% | — | 23 sept 2021 | An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT… |
| CVE-2021-21820 | Crítica (9.8) | 3.0% | — | 16 jul 2021 | A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of… |
| CVE-2021-21819 | Alta (7.2) | 2.9% | — | 16 jul 2021 | A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to arbitrary command execution. An attacker can send a sequence… |
| CVE-2021-21818 | Alta (7.5) | 1.7% | — | 16 jul 2021 | A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence… |
| CVE-2021-21817 | Alta (7.5) | 2.0% | — | 16 jul 2021 | An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An… |
| CVE-2021-21816 | Media (4.3) | 32% | — | 16 jul 2021 | An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to the disclosure of sensitive information. An attacker can send an… |