Dlink

Dir-816l Firmware

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2020-15893

Exploit
  • EPSS 84.78%
  • Veröffentlicht 22.07.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:06:23

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the ...

7.5

CVE-2020-15894

  • EPSS 1.27%
  • Veröffentlicht 22.07.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:06:23

An issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an attacker to retrieve various sensitive in...

6.1

CVE-2020-15895

Exploit
  • EPSS 41.5%
  • Veröffentlicht 22.07.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:06:23

An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter, before it's printed on the webpage.

7.5

CVE-2019-7642

Exploit
  • EPSS 10.87%
  • Veröffentlicht 25.03.2019 22:29:00
  • Zuletzt bearbeitet 21.11.2024 04:48:27

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions...

6.8

CVE-2015-5999

Exploit
  • EPSS 16.44%
  • Veröffentlicht 18.11.2015 16:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password...