Dlink Dir-815 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-815 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2023-51123 — CVSS 9.8 (critical): An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the…
• CVE-2018-25115 — CVSS 9.8 (critical): Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03…
• CVE-2015-0150 — CVSS 9.8 (critical): The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access…
• CVE-2015-0152 — CVSS 9.8 (critical): D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage…
• CVE-2014-8888 — CVSS 9.8 (critical): The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary…
• CVE-2018-10106 — CVSS 9.8 (critical): D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information…
• CVE-2024-22651 — CVSS 9.8 (critical): There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.
• CVE-2025-6328 — CVSS 8.8 (high): A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of…
• CVE-2015-0151 — CVSS 8.8 (high): Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack…
• CVE-2023-37758 — CVSS 7.5 (high): D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi.
• CVE-2015-0153 — CVSS 7.5 (high): D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage…
• CVE-2020-25786 — CVSS 6.1 (medium): webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This…
• CVE-2018-10108 — CVSS 6.1 (medium): D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to…
• CVE-2018-10107 — CVSS 6.1 (medium): D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the RESULT parameter to…
• CVE-2024-0717 — CVSS 5.3 (medium): A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S…