D-View vulnerabilities

14 known vulnerabilities in D-View from D-Link. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  D-View: Exposed Dangerous Method or Function

  CVE-2024-5299May 23, 2024D-LinkEPSS 1.82%

  D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this v

• 8.8 High severity

  D-View: Exposed Dangerous Method or Function

  CVE-2024-5298May 23, 2024D-LinkEPSS 1.85%

  D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to e

• 8.8 High severity

  D-View: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5297May 23, 2024D-LinkEPSS 1.93%

  D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerabili

• 9.8 Critical severity

  D-View: Use of Hard-coded Cryptographic Key

  CVE-2024-5296May 23, 2024D-LinkEPSS 1.12%

  D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.

• 9.8 Critical severity

  D-View: Exposed Dangerous Method or Function

  CVE-2023-44414May 3, 2024D-LinkEPSS 2.92%

  D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit t

• 7.5 High severity

  D-View: Missing Authentication for Critical Functionality

  CVE-2023-44413May 3, 2024D-LinkEPSS 1.61%

  D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of D-Link D-View. Authentication is not required to exploit t

• 8.2 High severity

  D-View: Improper Restriction of XML External Entity Reference

  CVE-2023-44412May 3, 2024D-LinkEPSS 82.3%

  D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit th

• 9.8 Critical severity

  D-View: Use of Hard-coded Credentials

  CVE-2023-44411May 3, 2024D-LinkEPSS 2.54%

  D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this v

• 8.8 High severity

  D-View: Improper Authorization

  CVE-2023-44410May 3, 2024D-LinkEPSS 1.58%

  D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The speci

• 9.8 Critical severity

  D-View: Use of Hard-coded Cryptographic Key

  CVE-2023-32169May 3, 2024D-LinkEPSS 56.1%

  D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of D-Link D-View. Authentication is not required to exploit this vulnerability.

• 8.8 High severity

  D-View: Improper Authorization

  CVE-2023-32168May 3, 2024D-LinkEPSS 1.63%

  D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specif

• 8.1 High severity

  D-View: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-32166May 3, 2024D-LinkEPSS 74.3%

  D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The s

• 9.8 Critical severity

  D-View: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-32165May 3, 2024D-LinkEPSS 73.3%

  D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Authentication is not required to exploit this vulner

• 7.5 High severity

  D-View: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-32164May 3, 2024D-LinkEPSS 84.9%

  D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of D-Link D-View. Authentication is not required to exploit this v