CVE-2024-0717

Affects a wide range of D-Link devices (e.g., DAP-1360, DIR-300, DIR-615, DIR-620, DVG-series, Good Line Router v2, and others) with the vulnerability residing in the HTTP GET Request Handler for /devinfo. The underlying issue is improper handling of the area parameter, where input such as notice...

CVE-2018-10106

CVE-2018-10106 affects D-Link DIR-815 Rev. B (firmware up to DIR-815_REVB_FIRMWARE_PATCH_2.07.B01). The vulnerability is a permission bypass and information disclosure in /htdocs/web/getcfg.php, demonstrated by a crafted request to /getcfg.php?a=%0a_POST_SERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZED_GRO...

CVE-2024-22651

Summary (validated by multiple sources): CVE-2024-22651 is a command-injection vulnerability in the D-Link DIR-815 router, specific to the cgibin binary’s ssdpcgi_main function in firmware v1.04. The issue enables unauthenticated network-exploitation with high impact across confidentiality, integ...

CVE-2014-8888

The CVE-2014-8888 entry maps to a vulnerability in D-Link DIR-815 devices (firmware prior to 2.03.B02) where the remote administration interface is susceptible to an HTTP command injection due to insufficient input validation. Affected component/process: the remote admin web interface; impact per...

CVE-2015-0150

The CVE-2015-0150 entry concerns D-Link DIR-815 devices with firmware before 2.07.B01, where the remote administration UI permits bypassing access restrictions via unspecified vectors. Affected product is DIR-815; vulnerable component is the remote management UI. Impact is bypassed access control...

CVE-2018-10107

Affected product: D-Link DIR-815 Rev. B (firmware through 2.07.B01). Vulnerable component: /htdocs/webinc/js/info.php, specifically the RESULT parameter, due to inadequate input/page protection that enables cross-site scripting. Impact: an attacker could exploit the XSS to obtain authentication c...

CVE-2023-51123

CVE-2023-51123 affects D-Link DIR-815 (dir815) devices with firmware implied by v1.01SSb08.bin. The issue allows remote code execution via a crafted POST to the service parameter in the cgibin binary’s soapcgi_main function, enabling an attacker to run arbitrary code. Reported across multiple sou...

CVE-2020-25786

CVE-2020-25786 affects D-Link DIR-816L (2.06.B09_BETA) and DIR-803 (1.04.B02). A flaw in webinc/js/info.php allows XSS via the HTTP Referer header . Public notes: affected products are no longer supported by the maintainer; exploitability is typically limited due to URL encoding (except in Intern...

CVE-2015-0152

CVE-2015-0152 affects D‑Link DIR‑815 devices with firmware prior to 2.07.B01. The root cause is cleartext storage of the administrative password, allowing remote attackers to obtain sensitive information. Affected product: D‑Link DIR‑815 router; vulnerable component is the firmware where the admi...

CVE-2018-10108

The CVE-2018-10108 entry covers a cross-site scripting (XSS) vulnerability in D-Link DIR-815 REV. B devices, reported to affect firmware up to DIR-815_REVB_FIRMWARE_PATCH_2.07.B01, specifically in the Treturn parameter of /htdocs/webinc/js/bsc_sms_inbox.php. Public sources in the connected data c...

CVE-2015-0151

The CVE-2015-0151 issue affects the D-Link DIR-815 router (firmware prior to 2.07.B01). It is a Cross-Site Request Forgery vulnerability that enables an attacker to hijack the authentication of arbitrary users for requests that inject XSS sequences. The root cause is insufficient validation of us...

CVE-2015-0153

CVE-2015-0153 affects D-Link DIR-815 routers. Affected: DIR-815 devices with firmware prior to 2.07.B01. Issue: plaintext storage of the wireless key allows remote attackers to obtain sensitive information. Impact: information disclosure (partial to high depending on scope). Root cause: cleartext...

CVE-2023-37758

The CVE-2023-37758 entry affects D-LINK DIR-815 v1.01 with a buffer overflow in the /web/captcha.cgi component. The issue is described consistently across multiple sources (NVD/Red Hat/CVE List and related databases). The root cause is a buffer overflow in the captcha.cgi handler, enabling potent...

CVE-2018-25115

Multiple D-Link DIR-series routers (DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, DIR-815) are affected by a remote code execution vulnerability in the /service.cgi endpoint. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system...

CVE-2025-6328

CVE-2025-6328 - D-Link DIR-815 (firmware 1.01) vulnerable component: the function sub_403794 in hedwig.cgi, which causes a stack-based buffer overflow. A remote attacker can exploit this (exploit publicly disclosed). Affected product is the D-Link DIR-815; impact includes potential remote code ex...