Dlink Dir-816 A2 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-816 A2 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2018-17063 — CVSS 9.8 (critical): An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the…
• CVE-2018-17064 — CVSS 9.8 (critical): An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the…
• CVE-2018-17065 — CVSS 9.8 (critical): An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password…
• CVE-2018-17066 — CVSS 9.8 (critical): An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the…
• CVE-2018-17067 — CVSS 9.8 (critical): An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer…
• CVE-2018-17068 — CVSS 9.8 (critical): An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the…
• CVE-2023-43236 — CVSS 9.8 (critical): D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi.
• CVE-2023-43237 — CVSS 9.8 (critical): D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC.
• CVE-2023-43238 — CVSS 9.8 (critical): D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi.
• CVE-2023-43239 — CVSS 9.8 (critical): D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC.
• CVE-2023-43240 — CVSS 9.8 (critical): D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter.
• CVE-2025-44835 — CVSS 6.3 (medium): D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute…
• CVE-2024-0921 — CVSS 4.7 (medium): A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown…