CVE-2018-6530

The CVE-2018-6530 entry describes an OS command injection in the D‑Link DIR series through soap.cgi (soapcgi_main in cgibin), allowing remote execution of arbitrary OS commands via the service parameter. Affected devices include DIR-880L (REVA firmware patches 1.08B04 and earlier), DIR-868L (DIR8...

CVE-2019-17621

CVE-2019-17621 affects the D-Link DIR-859 router (firmware 1.05/1.06B01 Beta01). The issue is an unauthenticated remote command-execution vulnerability via the UPnP endpoint at /gena.cgi. An attacker on the local network can send a crafted HTTP SUBSCRIBE request to the UPnP service and execute sy...

CVE-2016-6563

CVE-2016-6563 describes a stack-based buffer overflow in the HNAP login path of certain D-Link DIR routers when processing malformed SOAP messages. Affected models include DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L. The overflow occurs in the HNA...

CVE-2019-20213

D-Link DIR-859 routers are affected by CVE-2019-20213: unauthenticated information disclosure via the AUTHORIZED_GROUP=1%0a value demonstrated by vpnconfig.php on devices running versions prior to 1.07b03_beta. The vulnerability enables exposure of information over the network with no authenticat...

CVE-2017-14948

The CVE-2017-14948 issue affects D-Link DIR-880L (1.08B04) and DIR-895 L/R (1.13b03) due to a buffer overflow in the htdocs/fileaccess.cgi component. A crafted HTTP request where CONTENT_TYPE begins with boundary= and exceeds 256 characters can trigger a buffer overflow, potentially enabling remo...

CVE-2025-4341

D-Link DIR-880L up to firmware 104WWb01 contains a command-injection vulnerability in the Request Header Handler’s /htdocs/ssdpcgi, specifically the sub_16570 function. Input arguments HTTP_ST/REMOTE_ADDR/REMOTE_PORT/SERVER_ID can be manipulated to achieve remote code execution; the exploit has b...

CVE-2020-29322

The CVE-2020-29322 entry concerns the D-Link DIR-880L router; vulnerable component/function: telnet service exposed via firmware decompilation. Root cause: firmware decompilation enables an unauthenticated attacker to gain access to the firmware and extract sensitive data. Reported impact: creden...

CVE-2018-20675

The CVE-2018-20675 entry affects multiple D-Link devices: DIR-822 C1 (before v3.11B01Beta), DIR-822-US C1 (before v3.11B01Beta), DIR-850L A* (before v1.21B08Beta), DIR-850L B* (before v2.22B03Beta), and DIR-880L A* (before v1.20B02Beta). The issue is an authentication bypass, reported across thes...

CVE-2018-20674

The vulnerability CVE-2018-20674 affects multiple D-Link wireless routers (DIR-822 C1/US C1, DIR-850L A*/B*, DIR-880L A*) prior to specific Beta firmware versions (e.g., v3.11B01Beta for DIR-822/US; v1.21B08Beta for DIR-850L A*, v2.22B03Beta for DIR-850L B*, v1.20B02Beta for DIR-880L A*). It enab...