CVE-2018-25115
- EPSS 0.52%
- Published 27.08.2025 21:24:23
- Last modified 24.09.2025 18:03:34
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system comman...
CVE-2013-10048
- EPSS 1.93%
- Published 01.08.2025 20:39:20
- Last modified 23.09.2025 17:41:57
An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending spe...
CVE-2024-7357
- EPSS 0.79%
- Published 01.08.2024 13:15:10
- Last modified 16.07.2025 13:53:45
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. The manipulation of the argument service leads to os command in...