CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DIR-859 Router hedwig.cgi Path Traversal and Remote Code Execution Vulnerability (CVE-2024-0769)
[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.
[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.
[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.
D-Link DIR-610 Router command.php Remote Command Execution (RCE) Vulnerability (CVE-2020-9377)
[Affected Scope] D-Link DIR-610 devices (End-of-Life / Unsupported products)
[Impact] An authenticated attacker can execute arbitrary system commands with root privileges via the 'cmd' parameter to 'command.php', leading to full device compromise.
[Mitigation] Since this product is End-of-Life (EOL), no official patches are available. Immediate device replacement or strict access control is highly recommended.