CVE-2025-60344: Path Traversal: '../filedir'

A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...

PT-2025-42896

Name of the Vulnerable Software and Affected Versions D-Link DSR-150 D-Link DSR-150N D-Link DSR-250N version 1.09B32 WW Description An unauthenticated Local File Inclusion LFI exists in D-Link DSR series routers. This allows remote attackers to retrieve sensitive configuration files in clear text...

PT-2020-5338

Name of the Vulnerable Software and Affected Versions D-Link DSR-250 version 3.17 D-Link DSR-150 affected versions not specified D-Link DSR-150N affected versions not specified D-Link DSR-250N affected versions not specified D-Link DSR-500 affected versions not specified D-Link DSR-500N affected...

CVE-2013-5945: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 allow remote attackers to execute arbitrary...

CVE-2013-7005: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive...