Dlink Dir-820l Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-820l Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2023-44807 — CVSS 9.8 (critical): D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.
• CVE-2021-45382 — CVSS 9.8 (critical) — actively exploited: A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and…
• CVE-2022-26258 — CVSS 9.8 (critical) — actively exploited: D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
• CVE-2015-1187 — CVSS 9.8 (critical) — actively exploited: The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to…
• CVE-2023-25279 — CVSS 9.8 (critical): OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.
• CVE-2023-25280 — CVSS 9.8 (critical) — actively exploited: OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with…
• CVE-2024-48150 — CVSS 9.8 (critical): D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_451208 function.
• CVE-2023-44809 — CVSS 9.8 (critical): D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.
• CVE-2023-44808 — CVSS 9.8 (critical): D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.
• CVE-2025-52079 — CVSS 8.8 (high): The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password…
• CVE-2024-51186 — CVSS 8.0 (high): D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution (RCE) vulnerability via the ping_addr parameter in the ping_v4…
• CVE-2023-25283 — CVSS 7.5 (high): A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1…
• CVE-2023-25281 — CVSS 7.5 (high): A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service…
• CVE-2022-34973 — CVSS 7.5 (high): D-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter at ping.ccp.
• CVE-2023-25282 — CVSS 6.5 (medium): A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and…