Dlink Dir-859 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-859 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2019-17621 — CVSS 9.8 (critical) — actively exploited: The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to…
• CVE-2019-20216 — CVSS 9.8 (critical): D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method…
• CVE-2019-20217 — CVSS 9.8 (critical): D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method…
• CVE-2023-36092 — CVSS 9.8 (critical): Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main…
• CVE-2019-20215 — CVSS 9.8 (critical): D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in…
• CVE-2019-20213 — CVSS 7.5 (high): D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as…
• CVE-2022-25106 — CVSS 5.5 (medium): D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows…
• CVE-2024-0769 — CVSS 5.3 (medium) — actively exploited: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue…