CVE-2018-6213: Use of Hard-coded Credentials

In the web server on D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, there is a hardcoded password of anonymous for the admin account...

CVE-2018-6211: Improper Neutralization of Special Elements used in an OS Command

On D-Link DIR-620 devices with a certain customized by ISP variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is possible as a result of incorrect processing of the resbuf parameter to index.cgi...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

Hardcoded credentials

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

CVE-2018-6210

The CVE-2018-6210 entry concerns D-Link DIR-620 routers with a Rostelekom variant of firmware 1.0.37 that ship a hardcoded rostel account. The underlying risk is that an unauthenticated remote attacker can obtain access via TELNET, enabling privileged router access (the OS/user account context fr...

CVE-2018-6210: Use of Hard-coded Credentials

D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session...

PT-2018-17414

Name of the Vulnerable Software and Affected Versions D-Link DIR-620 version 1.0.37 Description The issue allows remote attackers to obtain access via a TELNET session, due to a hardcoded rostel account in a certain Rostelekom variant of the firmware. Recommendations For version 1.0.37, consider...

PT-2018-3888 · D Link · D-Link Dir-895L/R +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L versions 1.21B02beta01 and earlier D-Link DIR-885L/R versions 1.21B03beta01 and earlier D-Link DIR-895L/R versions 1.21B04beta04 and earlier Description: The issue is related to the predictability of the "/docs/captcha...

The vulnerability of the remote management interface of the D-Link DIR-815 allows a hacker to execute arbitrary commands.

The vulnerability of the D-Link DIR-815 router’s remote administration interface is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted HTTP requests...

PT-2018-10743

Name of the Vulnerable Software and Affected Versions CmsEasy version 6.1 20180508 Description A CSRF issue allows adding an article via the /index.php?case=table&act=add&table=archive&admin dir=admin endpoint. Recommendations For CmsEasy version 6.1 20180508, as a temporary workaround, consider...

D-Link DIR-815 Access Restriction Bypass Vulnerability

D-Link DIR-815 is a wireless router product from AUO D-Link. A security vulnerability exists in the remote management user interface in the D-Link DIR-815 using firmware versions prior to 2.07.B01. A remote attacker could exploit this vulnerability to bypass access restrictions...

D-Link DIR-815 Cross-Site Request Forgery Vulnerability

D-Link DIR-815 is a wireless router product from AUO D-Link. A cross-site request forgery vulnerability exists in the D-Link DIR-815 with firmware prior to version 2.07.B01, which stems from the program failing to properly validate user-submitted input. A remote attacker could exploit this...

D-Link DIR-815 Information Disclosure Vulnerability

D-Link DIR-815 is a wireless router product from AUO D-Link. An information disclosure vulnerability exists in the D-Link DIR-815 with firmware prior to version 2.07.B01, which originates from the program storing the administrative password in plaintext. A remote attacker could exploit this...

D-Link DIR-815 Information Disclosure Vulnerability (CNVD-2018-15272)

D-Link DIR-815 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-815 using firmware prior to version 2.07.B01, which stems from a program storing wireless keys in plaintext form. A remote attacker could exploit the vulnerability to obtain sensitive...

CVE-2012-10021

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdir605lcaptchabof.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:48:30+00:00| seen|...

CVE-2013-10050

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdir300exectelnet.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:48:30+00:00| seen|...

CVE-2013-10059

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdir615upexec.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:48:30+00:00| seen|...

D-Link DIR-620 Router Cross Site Scripting Vulnerability

D-link DIR-620 is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-620 due to the program failing to filter for special characters in the 'Search' field and failing to properly handle XMLHttpRequest objects. A remote attacker can use this...

D-Link DIR-620 Router Information Disclosure Vulnerability

D-link DIR-620 is a wireless router product of AUO D-Link. web server is one of the web servers. A security vulnerability exists in the web server of the D-Link DIR-620, which originates from the use of a hard-coded password for the admin account. An attacker can exploit this vulnerability to...