Dlink Dir-3040 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-3040 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (25)

CVE-2021-21820 — CVSS 9.8 (critical): A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted…
CVE-2022-44832 — CVSS 9.8 (critical): D-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection vulnerability via the SetTriggerLEDBlink function.
CVE-2021-21913 — CVSS 9.8 (critical): An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network…
CVE-2023-41230 — CVSS 8.8 (high): D-Link DIR-3040 HTTP Request Processing Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2022-43648 — CVSS 8.8 (high): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03…
CVE-2023-41229 — CVSS 8.8 (high): D-Link DIR-3040 HTTP Request Processing Referer Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2022-1262 — CVSS 7.8 (high): A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute…
CVE-2021-21817 — CVSS 7.5 (high): An information disclosure vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially…
CVE-2021-21818 — CVSS 7.5 (high): A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted…
CVE-2021-21819 — CVSS 7.2 (high): A code execution vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network…
CVE-2023-41217 — CVSS 7.1 (high): D-Link DIR-3040 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability…
CVE-2023-41219 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41220 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41221 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41222 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41223 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41224 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetDeviceSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41225 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41226 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetMyDLinkRegistration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41227 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetTriggerPPPoEValidate Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41216 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41228 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetUsersSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2023-41218 — CVSS 6.8 (medium): D-Link DIR-3040 prog.cgi SetWan3Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows…
CVE-2024-5294 — CVSS 6.5 (medium): D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent…
CVE-2021-21816 — CVSS 4.3 (medium): An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request…