Dlink Dsr-500n Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dsr-500n Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2013-5946 — CVSS 10.0 (critical): The runShellCmd function in systemCheck.htm in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250…
• CVE-2013-5945 — CVSS 9.8 (critical): Multiple SQL injection vulnerabilities in D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and…
• CVE-2021-39615 — CVSS 9.8 (critical): D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker…
• CVE-2020-25757 — CVSS 8.8 (high): A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system…
• CVE-2020-25758 — CVSS 8.8 (high): An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote…
• CVE-2020-25759 — CVSS 8.8 (high): An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an…
• CVE-2013-7004 — CVSS 7.8 (high): D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and…
• CVE-2013-7005 — CVSS 4.9 (medium): D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and…