CVE Vulnerability Advisory Database

[Affected Scope] D-Link DIR-823X router firmware versions 240126 and 240802.

[Impact] An authorized attacker can execute arbitrary system commands with root privileges and fully compromise the device by sending a crafted HTTP POST request to the /goform/set_prohibiting endpoint.

[Mitigation] Apply the official firmware patch immediately, disable remote WAN management, and enforce strong administrator credentials.

[Affected Scope] All firmware versions of End-of-Life (EOL) D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L

[Impact] Unauthenticated remote attackers can leverage hardcoded credentials and inject arbitrary system commands to achieve full system compromise

[Mitigation] Since these products are no longer supported, it is strongly recommended to immediately retire and replace the affected devices

[Affected Scope] All firmware versions of legacy D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L.

[Impact] Remote unauthenticated attackers can bypass authentication using hard-coded credentials, leading to complete system compromise and arbitrary code execution.

[Mitigation] Since these devices are End-of-Life (EOL) and will not receive security patches, they must be immediately decommissioned and replaced.

[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.

[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.

[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.

[Affected Scope] D-Link DIR-820L router with firmware version DIR820LA1_FW105B03 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a crafted HTTP request

[Mitigation] Since this product is End-of-Life (EOL), immediate hardware replacement is highly recommended; otherwise, disable remote management and restrict access

[Affected Scope] D-Link DNR-322L Cloud Network Video Recorder firmware versions 2.60B15 and prior

[Impact] An authenticated attacker can exploit the lack of data integrity verification in the backup configuration feature to execute arbitrary OS-level commands and fully compromise the device

[Mitigation] Since this product is End-of-Life (EOL), immediately isolate the device from the external network and migrate to a supported alternative

[Affected Scope] D-Link DSL-2750B devices running firmware versions prior to 1.05

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the 'cli' parameter in login.cgi

[Mitigation] Apply the official firmware patch (v1.05 or later) or immediately disable WAN-side access to the web management interface

[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.

[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.

[Affected Scope] D-Link DIR-820L firmware version 1.05B03 and prior.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via crafted HTTP POST requests, leading to full device compromise.

[Mitigation] Since this device is End-of-Life (EOL), immediate replacement of the hardware is highly recommended. Alternatively, disable remote management and restrict access.

[Affected Scope] All hardware revisions of D-Link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the DDNS function, leading to full device compromise

[Mitigation] Since these devices have reached End of Life (EOL), no official patches will be released; immediate device replacement or strict access control is required

[Affected Scope] D-Link DIR-605 B2 Firmware Version 2.01MT and prior

[Impact] Unauthenticated remote attackers can retrieve plaintext administrator credentials by sending a forged POST request to the /getcfg.php page

[Mitigation] Immediately decommission and replace the legacy EOL device, or disable remote WAN management and restrict network access

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Authenticated attackers can inject arbitrary system commands via the ddns_enc.cgi script, leading to complete device compromise and potential botnet recruitment.

[Mitigation] Apply the official firmware patches immediately, or isolate the devices from the public internet and restrict access to the management interface.

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.

[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.

[Affected Scope] D-Link DIR-610 devices (End-of-Life / Unsupported products)

[Impact] An authenticated attacker can execute arbitrary system commands with root privileges via the 'cmd' parameter to 'command.php', leading to full device compromise.

[Mitigation] Since this product is End-of-Life (EOL), no official patches are available. Immediate device replacement or strict access control is highly recommended.

[Affected Scope] D-Link DCS-930L network camera devices running firmware versions prior to 2.12.

[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands via the 'SystemCommand' parameter in the 'setSystemCommand' API, leading to complete device compromise.

[Mitigation] Immediately upgrade the device firmware to version 2.12 or higher, and restrict external access to the camera's management interface.

[Affected Scope] D-Link DWL-2600AP hardware Rev A, firmware version 4.2.0.15 and prior

[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the Save Configuration functionality, leading to complete device compromise

[Mitigation] Apply the official firmware patch from the vendor, restrict access to the web management interface, or replace end-of-life devices

[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01

[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service

[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface

[Affected Scope] D-Link router and AP models including DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and achieve full system compromise by sending specially crafted HTTP requests.

[Mitigation] Since most affected devices are End-of-Life (EoL), immediately replace them with supported models, or restrict WAN-side management access and disable remote administration.

[Affected Scope] D-Link ShareCenter DNS-320 NAS devices running firmware versions up to and including 2.05.B10

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests.

[Mitigation] Immediately restrict external internet access to the device and replace the legacy/EoL hardware with a supported model.

[Affected Scope] D-Link router models DIR-880L (v1.08B04 and prior), DIR-868L (v1.12b04 and prior), DIR-865L (v1.08.B01 and prior), and DIR-860L (v1.10b04 and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target router by manipulating specific parameters in SOAP API requests, leading to complete device compromise

[Mitigation] Apply the latest official firmware patches provided by the vendor, disable remote WAN management interfaces, or replace end-of-life devices