D-Link DNS-320L
49 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-82691 | 20260717 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection | CRITICAL 9.4 | 3.6 % | ||
| CVE-2026-82689 | 20260717 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection | CRITICAL 9.4 | 3.3 % | ||
| CVE-2026-16448 | 20260205 | D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection | MEDIUM 5.3 | 1.9 % | ||
| CVE-2026-5312 | 20260205 | D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control | MEDIUM 6.9 | 0.5 % | ||
| CVE-2026-5311 | 20260205 | D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control | MEDIUM 6.9 | 1.0 % | ||
| CVE-2026-5215 | 20260205 | D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control | MEDIUM 5.3 | 0.9 % | ||
| CVE-2026-5214 | 20260205 | D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow | HIGH 8.7 | 0.7 % | ||
| CVE-2026-5213 | 20260205 | D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow | HIGH 8.7 | 0.7 % | ||
| CVE-2026-5212 | 20260205 | D-Link DNS-1550-04 webdav_mgr.cgi Webdav_Upload_File stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-5211 | 20260205 | D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Del stack-based overflow | HIGH 8.7 | 0.7 % | ||
| CVE-2026-4214 | 20260205 | D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4213 | 20260205 | D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4212 | 20260205 | D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4211 | 20260205 | D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow | HIGH 8.7 | 0.8 % | ||
| CVE-2026-4210 | 20260205 | D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection | MEDIUM 5.3 | 4.0 % | ||
| CVE-2026-4209 | 20260205 | D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection | MEDIUM 5.3 | 6.6 % | ||
| CVE-2026-4207 | 20260205 | D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection | MEDIUM 5.3 | 6.1 % | ||
| CVE-2026-4206 | 20260205 | D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection | MEDIUM 5.3 | 5.3 % | ||
| CVE-2026-4205 | 20260205 | D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection | MEDIUM 5.3 | 3.9 % | ||
| CVE-2026-4204 | 20260205 | D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection | MEDIUM 5.3 | 3.9 % | ||
| CVE-2026-4203 | 20260205 | D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection | MEDIUM 5.3 | 4.4 % | ||
| CVE-2026-4197 | 20260205 | D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection | MEDIUM 5.3 | 19 % | ||
| CVE-2026-4196 | 20260205 | D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection | MEDIUM 5.3 | 4.2 % | ||
| CVE-2026-4195 | 20260205 | D-Link DNS-1550-04 wizard_mgr.cgi command injection | MEDIUM 5.3 | 3.9 % | ||
| CVE-2026-4194 | 20260205 | D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control | MEDIUM 6.9 | 5.0 % | ||
| CVE-2024-8214 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R5_2nd_DiskMGR command injection | MEDIUM 5.3 | 5.2 % | ||
| CVE-2024-8213 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_1st_DiskMGR command injection | MEDIUM 5.3 | 7.2 % | ||
| CVE-2024-8212 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_R12R5_2nd_DiskMGR command injection | MEDIUM 5.3 | 7.5 % | ||
| CVE-2024-8211 | 20240814 | D-Link DNS-1550-04 hd_config.cgi cgi_FMT_Std2R1_DiskMGR command injection | MEDIUM 5.3 | 5.4 % | ||
| CVE-2024-8210 | 20240814 | D-Link DNS-1550-04 hd_config.cgi sprintf command injection | MEDIUM 5.3 | 7.5 % | ||
| CVE-2024-8134 | 20240814 | D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_Std2R5_1st_DiskMGR command injection | MEDIUM 5.3 | 7.9 % | ||
| CVE-2024-8133 | 20240814 | D-Link DNS-1550-04 HTTP POST Request hd_config.cgi cgi_FMT_R5_SpareDsk_DiskMGR command injection | MEDIUM 5.3 | 7.9 % | ||
| CVE-2024-8132 | 20240814 | D-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injection | MEDIUM 5.3 | 24 % | ||
| CVE-2024-8131 | 20240814 | D-Link DNS-1550-04 HTTP POST Request apkg_mgr.cgi module_enable_disable command injection | MEDIUM 5.3 | 8.2 % | ||
| CVE-2024-8130 | 20240814 | D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3 command injection | MEDIUM 5.3 | 7.9 % | ||
| CVE-2024-8129 | 20240814 | D-Link DNS-1550-04 HTTP POST Request s3.cgi cgi_s3_modify command injection | MEDIUM 5.3 | 24 % | ||
| CVE-2024-8128 | 20240814 | D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_add_zip command injection | MEDIUM 5.3 | 8.0 % | ||
| CVE-2024-8127 | 20240814 | D-Link DNS-1550-04 HTTP POST Request webfile_mgr.cgi cgi_unzip command injection | MEDIUM 5.3 | 6.7 % | ||
| CVE-2024-7922 | 20240814 | D-Link DNS-1550-04 myMusic.cgi cgi_write_playlist command injection | MEDIUM 5.3 | 20 % | ||
| CVE-2024-7849 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_create_album buffer overflow | HIGH 8.7 | 1.2 % | ||
| CVE-2024-7832 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_fullscreen_photos buffer overflow | HIGH 8.7 | 2.1 % | ||
| CVE-2024-7831 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_get_cooliris buffer overflow | HIGH 8.7 | 1.8 % | ||
| CVE-2024-7830 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_move_photo buffer overflow | HIGH 8.7 | 1.8 % | ||
| CVE-2024-7829 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_del_photo buffer overflow | HIGH 8.7 | 1.8 % | ||
| CVE-2024-7828 | 20240814 | D-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflow | HIGH 8.7 | 16 % | ||
| CVE-2024-7715 | 20240812 | D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection | MEDIUM 5.3 | 26 % | ||
| CVE-2024-3274 | 20240403 | D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure | MEDIUM 5.3 | 33 % | ||
| CVE-2024-3273 | 20240403 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-3272 | 20240403 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials | CRITICAL 9.8 | 98 % | KEV |