Dlink Dsp-w215 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dsp-w215 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2014-3936 — CVSS 10.0 (critical): Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier…
• CVE-2014-125117 — CVSS 9.8 (critical): A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can…
• CVE-2020-13136 — CVSS 7.5 (high): D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.
• CVE-2021-29295 — CVSS 7.5 (high): Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via…
• CVE-2020-13135 — CVSS 6.5 (medium): D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid…