Dir-819 Firmware vulnerabilities

2 known vulnerabilities in Dir-819 Firmware from D-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Dir-819 Firmware: Uncontrolled Resource Consumption

  CVE-2022-40946Apr 16, 2023D-LinkEPSS 7.52%

  On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.

• 8.1 High severity

  Dir-819 Firmware: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-38258Sep 8, 2022D-LinkEPSS 1.52%

  A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request.