Dlink
Dlink Dir-816 A2 Firmware: vulnerabilidades y CVE
Dlink Dir-816 A2 Firmware tiene 13 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 12 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses0
Críticas12
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-44835 | Media (6.3) | 1.1% | — | 1 may 2025 | D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell. |
| CVE-2024-0921 | Crítica (9.8) | 38% | — | 26 ene 2024 | A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface.… |
| CVE-2023-43240 | Crítica (9.8) | 13% | — | 21 sept 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. |
| CVE-2023-43239 | Crítica (9.8) | 13% | — | 21 sept 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. |
| CVE-2023-43238 | Crítica (9.8) | 1.3% | — | 21 sept 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi. |
| CVE-2023-43237 | Crítica (9.8) | 13% | — | 21 sept 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. |
| CVE-2023-43236 | Crítica (9.8) | 1.1% | — | 21 sept 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi. |
| CVE-2018-17068 | Crítica (9.8) | 3.7% | — | 15 sept 2018 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead to command… |
| CVE-2018-17067 | Crítica (9.8) | 1.9% | — | 15 sept 2018 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address. |
| CVE-2018-17066 | Crítica (9.8) | 7.3% | — | 15 sept 2018 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command… |
| CVE-2018-17065 | Crítica (9.8) | 1.9% | — | 15 sept 2018 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite the return address. |
| CVE-2018-17064 | Crítica (9.8) | 7.4% | — | 15 sept 2018 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command… |
| CVE-2018-17063 | Crítica (9.8) | 4.1% | — | 15 sept 2018 | An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/NTPSyncWithHost route. This could lead to… |