Vendor
D-Link
1,708 known vulnerabilities in products by D-Link, 28 of them actively exploited (CISA KEV).
Key figures
1,708
Vulnerabilities
28
Actively exploited (KEV)
2
Used by ransomware
573
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2018-6530 | D-Link Multiple Routers OS Command Injection Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2019-16057 | D-Link DNS-320 Remote Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2024-3272 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials In CISA KEV | 9.8 | |
| Critical | CVE-2023-25280 | D-Link DIR-820 Router OS Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-20017 | D-Link DSL-2750B Devices Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2019-16920 | D-Link Multiple Routers Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-25506 | D-Link DNS-320 Device Command Injection Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-8361 | Realtek SDK Improper Input Validation Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2022-37055 | D-Link Routers Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2019-17621 | D-Link DIR-859 Router Command Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-1187 | D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2020-29557 | D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2025-29635 | D-Link DIR-823X Command Injection Vulnerability In CISA KEV | 7.2 | |
| Critical | CVE-2015-2051 | D-Link DIR-645 Router Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2022-40799 | D-Link DNR-322L Download of Code Without Integrity Check Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-25079 | D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2024-3273 | D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection In CISA KEV | 7.3 | |
| Critical | CVE-2020-9377 | D-Link DIR-610 Devices Remote Command Execution In CISA KEV | 8.8 | |
| Critical | CVE-2019-20500 | D-Link DWL-2600AP Access Point Command Injection Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2014-100005 | D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability In CISA KEV | 8.0 | |
| Critical | CVE-2020-25078 | D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2021-40655 | D-Link DIR-605 Router Information Disclosure Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2016-11021 | D-Link DCS-930L Devices OS Command Injection Vulnerability In CISA KEV | 7.2 |