PT-2025-3535 · D Link · D-Link 816

Name of the Vulnerable Software and Affected Versions: D-Link 816A2 FWv1.10CNB05 R1B011D88210 Description: An access control issue in the component form2Wan.cgi of D-Link devices allows unauthenticated attackers to configure the WAN service of the device via a crafted POST request to the...

PT-2025-3536 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816A2 versions 1.10CNB05 R1B011D88210 Description: The issue is related to an access control problem in the form2WlAc.cgi component, allowing unauthenticated attackers to set the 2.4G and 5G mac access control list of the device vi...

PT-2025-3540 · D Link · D-Link 816

Name of the Vulnerable Software and Affected Versions: D-Link 816A2 FWv1.10CNB05 R1B011D88210 Description: The issue is related to an access control problem in the websURLFilterAddDel component, allowing unauthenticated attackers to set the device's filter settings via a crafted POST request. Thi...

PT-2025-2006 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the ACL Handler component, specifically affecting an unknown part of the file /goform/form2LocalAclEditcfg.cgi. This issue leads to improper acce...

PT-2025-2004 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the DHCPD Setting Handler component, specifically affecting an unknown functionality of the file /goform/form2Dhcpd.cgi. This issue leads to...

D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings Improper Access Control Vulnerability

The D-Link DIR-823G is a wireless router that provides network connectivity and management for homes and small offices. The D-Link DIR-823G suffers from an improper access control vulnerability that originates in the Web Management Interface component's SetAutoRebootSettings, SetClientInfo,...

PT-2025-2005 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: The issue is related to the IP QoS Handler component of the D-Link DIR-816 A2 router's firmware, which is associated with inadequate access controls. This can be exploited by a...

PT-2025-2003 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical vulnerability was found in the WiFi Settings Handler component, specifically in an unknown function of the file /goform/form2AdvanceSetup.cgi. The manipulation leads to...

PT-2025-2001 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue affects the unknown code of the file /goform/DDNS of the DDNS Service component, leading to improper access controls. The attack can be initiated remotely. The...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router that provides network connectivity and management for homes and small offices. The D-Link DIR-823G suffers from an improper access control vulnerability that originates in the Web Management Interface component's SetAutoRebootSettings, SetClientInfo,...

PT-2025-3534 · D Link · D-Link 816

Name of the Vulnerable Software and Affected Versions: D-Link 816A2 FWv1.10CNB05 R1B011D88210 Description: An access control issue in the component form2WlanBasicSetup.cgi allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request to the...

PT-2025-2002 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the Virtual Service Handler component, affecting the file /goform/form2AddVrtsrv.cgi. This leads to improper access controls, allowing for remote...

PT-2025-3538 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link 816A2 FWv1.10CNB05 R1B011D88210 Description: An access control issue in the component form2alg.cgi of D-Link 816A2 FWv1.10CNB05 R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST reque...

PT-2025-3541 · D Link · D-Link 816

Name of the Vulnerable Software and Affected Versions: D-Link 816A2 FWv1.10CNB05 R1B011D88210 Description: The issue is related to an access control problem in the formDMZ.cgi component, which allows unauthenticated attackers to configure the DMZ service of the device through a crafted POST...

PT-2025-3480 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 REVB version 2.03 Description: The issue concerns an OS command injection vulnerability in the CGl interface apc client pin.cgi, which allows remote attackers to execute arbitrary commands via the wps pin parameter passed to th...

FICORA, CAPSAICIN Botnets Exploit Old D-Link Router Flaws for DDoS Attacks

Mirai and Keksec botnet variants are exploiting critical vulnerabilities in D-Link routers. Learn about the impact, affected devices, and how to protect yourself from these attacks...

FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks

Cybersecurity researchers are warning about a spike in malicious activity that involves roping vulnerable D-Link routers into two different botnets, a Mirai variant dubbed FICORA and a Kaiten aka Tsunami variant called CAPSAICIN. "These botnets are frequently spread through documented D-Link...

VulnCheck KEV: CVE-2024-33112

D-Link DIR-845L v1.01KRb03 and before is vulnerable to an operating system command injection vulnerability...

The vulnerability of the plugins_call_handle_uri_clean() function in the /sbin/lighttpd microprogramming system of D-Link DAP-1520 wireless signal amplifiers allows a hacker to induce a service failure.

The vulnerability of the pluginscallhandleuriclean function in the /sbin/lighttpd microprogramming system for D-Link DAP-1520 wireless signal amplifiers is related to errors in pointer assignment due to incorrect checking of HTTP request formats. Exploiting this vulnerability could allow an...

D-Link DAP-1520 DoS Vulnerability (SAP10395)

D-Link DAP-1520 devices are prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...