Dlink Dsr-250 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dsr-250 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2013-5946 — CVSS 10.0 (critical): The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250…
• CVE-2013-5945 — CVSS 9.8 (critical): Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and…
• CVE-2020-18568 — CVSS 9.8 (critical): The D-Link DSR-250 (3.14) DSR-1000N (2.11B201) UPnP service contains a command injection vulnerability, which can cause remote command…
• CVE-2024-57376 — CVSS 8.8 (high): Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows…
• CVE-2020-25757 — CVSS 8.8 (high): A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system…
• CVE-2020-25758 — CVSS 8.8 (high): An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote…
• CVE-2020-25759 — CVSS 8.8 (high): An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an…
• CVE-2013-7004 — CVSS 7.8 (high): D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and…
• CVE-2013-7005 — CVSS 4.9 (medium): D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and…