Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

D-Link — Vulnerabilities & Security Advisories 825

Browse all 825 CVE security advisories affecting D-Link. AI-powered Chinese analysis, POCs, and references for each vulnerability.

D-Link manufactures networking hardware, primarily consumer-grade routers and wireless access points, serving as a critical infrastructure component for home and small business internet connectivity. The company’s product line has historically been plagued by significant security deficiencies, resulting in 760 recorded Common Vulnerabilities and Exposures. These flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from hardcoded credentials or unpatched firmware updates. A notable incident occurred in 2017 when a critical vulnerability allowed attackers to gain administrative control over millions of devices, facilitating large-scale botnet recruitment. The persistent lack of timely security patches and weak default configurations have established a pattern of neglect, leaving users exposed to persistent threats. This track record highlights systemic issues in the development and maintenance lifecycle of D-Link’s network equipment, necessitating rigorous user-side security measures.

CVE ID Title CVSS Severity Published
CVE-2024-9533 D-Link DIR-605L formDeviceReboot buffer overflow — DIR-605L CWE-120 8.8 High 2024-10-05
CVE-2024-9532 D-Link DIR-605L formAdvanceSetup buffer overflow — DIR-605L CWE-120 8.8 High 2024-10-05
CVE-2024-9515 D-Link DIR-605L formSetQoS buffer overflow — DIR-605L CWE-120 8.8 High 2024-10-04
CVE-2024-9514 D-Link DIR-605L formSetDomainFilter buffer overflow — DIR-605L CWE-120 8.8 High 2024-10-04
CVE-2024-9004 D-Link DAR-7000 Backup_Server_commit.php os command injection — DAR-7000 CWE-78 6.3 Medium 2024-09-19
CVE-2024-45698 D-Link WiFi router - OS Command Injection — DIR-X4860 A1 CWE-78 9.8 Critical 2024-09-16
CVE-2024-45697 D-Link WiFi router - Hidden Functionality — DIR-X4860 A1 CWE-912 9.8 Critical 2024-09-16
CVE-2024-45696 D-Link WiFi router - Hidden Functionality — DIR-X4860 A1 CWE-912 8.8 High 2024-09-16
CVE-2024-45695 D-Link WiFi router - Stack-based Buffer Overflow — DIR-X4860 A1 CWE-121 9.8 Critical 2024-09-16
CVE-2024-45694 D-Link WiFi router - Stack-based Buffer Overflow — DIR-X5460 A1 CWE-121 9.8 Critical 2024-09-16
CVE-2024-8461 D-Link DNS-320 Web Management Interface discovery.cgi information disclosure — DNS-320 CWE-200 5.3 Medium 2024-09-05
CVE-2024-8460 D-Link DNS-320 Web Management Interface widget_api.cgi information disclosure — DNS-320 CWE-200 3.7 Low 2024-09-05
CVE-2024-8214 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection — DNS-120 CWE-77 6.3 Medium 2024-08-27
CVE-2024-8213 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection — DNS-120 CWE-77 6.3 Medium 2024-08-27
CVE-2024-8212 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection — DNS-120 CWE-77 6.3 Medium 2024-08-27
CVE-2024-8211 D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection — DNS-120 CWE-77 6.3 Medium 2024-08-27
CVE-2024-8210 D-Link DNS-1550-04 hd_config.cgi sprintf command injection — DNS-120 CWE-77 6.3 Medium 2024-08-27
CVE-2024-8134 D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8133 D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8132 D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8131 D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8130 D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8129 D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8128 D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-8127 D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection — DNS-120 CWE-77 6.3 Medium 2024-08-24
CVE-2024-7922 D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection — DNS-120 CWE-77 6.3 Medium 2024-08-19
CVE-2024-7849 D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow — DNS-120 CWE-120 8.8 High 2024-08-15
CVE-2024-7833 D-Link DI-8100 upgrade_filter.asp upgrade_filter_asp command injection — DI-8100 CWE-77 6.3 Medium 2024-08-15
CVE-2024-7832 D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow — DNS-120 CWE-120 8.8 High 2024-08-15
CVE-2024-7831 D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow — DNS-120 CWE-120 8.8 High 2024-08-15

This page lists every published CVE security advisory associated with D-Link. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.