Dir-820lw Firmware vulnerabilities

3 known vulnerabilities in Dir-820lw Firmware from D-Link. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DIR-820LW: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-4499Mar 20, 2026D-LinkEPSS 3.74%

  A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgi_main of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and ma

• 9.8 Critical severity

  dir-820lw_firmware: Use of Hard-coded Credentials

  CVE-2024-41610Jul 30, 2024D-Link

  D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands.

• 9.8 Critical severity

  D-Link Multiple Routers Remote Code Execution Exploited

  CVE-2021-45382Feb 17, 2022D-LinkEPSS 97.8%

  A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hard