Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

D-Link — Vulnerabilities & Security Advisories 786

Browse all 786 CVE security advisories affecting D-Link. AI-powered Chinese analysis, POCs, and references for each vulnerability.

D-Link manufactures networking hardware, primarily consumer-grade routers and wireless access points, serving as a critical infrastructure component for home and small business internet connectivity. The company’s product line has historically been plagued by significant security deficiencies, resulting in 760 recorded Common Vulnerabilities and Exposures. These flaws frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from hardcoded credentials or unpatched firmware updates. A notable incident occurred in 2017 when a critical vulnerability allowed attackers to gain administrative control over millions of devices, facilitating large-scale botnet recruitment. The persistent lack of timely security patches and weak default configurations have established a pattern of neglect, leaving users exposed to persistent threats. This track record highlights systemic issues in the development and maintenance lifecycle of D-Link’s network equipment, necessitating rigorous user-side security measures.

CVE IDTitleCVSSSeverityPublished
CVE-2024-6045 D-Link router - Hidden Backdoor — G403CWE-912 8.8 High2024-06-17
CVE-2024-6044 D-Link router - Arbitrary File Reading — G403CWE-22 6.5 Medium2024-06-17
CVE-2024-5299 D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability — D-ViewCWE-749 8.8AIHighAI2024-05-23
CVE-2024-5298 D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability — D-ViewCWE-749 8.8AIHighAI2024-05-23
CVE-2024-5297 D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability — D-ViewCWE-78 8.8AIHighAI2024-05-23
CVE-2024-5296 D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability — D-ViewCWE-321 9.8AICriticalAI2024-05-23
CVE-2024-5295 D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability — G416CWE-78 8.8AIHighAI2024-05-23
CVE-2024-5294 D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability — DIR-3040CWE-401 6.5AIMediumAI2024-05-23
CVE-2024-5293 D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability — DIR-2640CWE-121 8.8AIHighAI2024-05-23
CVE-2024-5292 D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability — Network AssistantCWE-427 7.8AIHighAI2024-05-23
CVE-2024-5291 D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability — DIR-2150CWE-78 8.8AIHighAI2024-05-23
CVE-2024-4965 D-Link DAR-7000-40 resmanage.php os command injection — DAR-7000-40CWE-78 6.3 Medium2024-05-16
CVE-2024-4964 D-Link DAR-7000-40 urlblist.php unrestricted upload — DAR-7000-40CWE-434 6.3 Medium2024-05-16
CVE-2024-4963 D-Link DAR-7000-40 url.php unrestricted upload — DAR-7000-40CWE-434 6.3 Medium2024-05-16
CVE-2024-4962 D-Link DAR-7000-40 resmanage.php unrestricted upload — DAR-7000-40CWE-434 6.3 Medium2024-05-16
CVE-2024-4961 D-Link DAR-7000-40 onlineuser.php unrestricted upload — DAR-7000-40CWE-434 6.3 Medium2024-05-16
CVE-2024-4960 D-Link DAR-7000-40 licenseauthorization.php unrestricted upload — DAR-7000-40CWE-434 6.3 Medium2024-05-16
CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization — DAR-8000-10CWE-502 6.3 Medium2024-05-10
CVE-2023-37325 D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability — DAP-2622CWE-306 8.1AIHighAI2024-05-07
CVE-2023-35749 D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability — DAP-2622CWE-121 8.8AIHighAI2024-05-07
CVE-2023-35757 D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability — DAP-2622CWE-121 8.8AIHighAI2024-05-07
CVE-2023-35748 D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability — DAP-2622CWE-121 8.8AIHighAI2024-05-07
CVE-2023-51629 D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability — DCS-8300LHV2CWE-259 8.8 -2024-05-03
CVE-2023-51628 D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability — DCS-8300LHV2CWE-121 8.8 -2024-05-03
CVE-2023-51627 D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability — DCS-8300LHV2CWE-121 8.0 -2024-05-03
CVE-2023-51626 D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability — DCS-8300LHV2CWE-121 8.8 -2024-05-03
CVE-2023-51625 D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability — DCS-8300LHV2CWE-78 8.0 -2024-05-03
CVE-2023-51624 D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability — DCS-8300LHV2CWE-121 8.8 -2024-05-03
CVE-2023-51623 D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability — DIR-X3260CWE-121 8.0 -2024-05-03
CVE-2023-51622 D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability — DIR-X3260CWE-121 8.0 -2024-05-03

This page lists every published CVE security advisory associated with D-Link. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.