Dlink Dir-880l Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-880l Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2016-6563 — CVSS 9.8 (critical): Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers…
• CVE-2017-14948 — CVSS 9.8 (critical): Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute…
• CVE-2018-20675 — CVSS 9.8 (critical): D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta…
• CVE-2018-6530 — CVSS 9.8 (critical) — actively exploited: OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and…
• CVE-2019-17621 — CVSS 9.8 (critical) — actively exploited: The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to…
• CVE-2018-20674 — CVSS 8.8 (high): D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta…
• CVE-2019-20213 — CVSS 7.5 (high): D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as…
• CVE-2020-29322 — CVSS 7.5 (high): The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an…
• CVE-2025-4341 — CVSS 6.3 (medium): A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function…