Dir-859 Firmware vulnerabilities

3 known vulnerabilities in Dir-859 Firmware from D-Link. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  D-Link DIR-859 Router Path Traversal Exploited

  CVE-2024-0769Jan 21, 2024D-LinkEPSS 82.7%

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the

• 9.8 Critical severity

  dir-859_firmware: Incorrect Authorization

  CVE-2023-36092Jul 31, 2023D-LinkEPSS 1.65%

  Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• 9.8 Critical severity

  D-Link DIR-859 Router Command Execution Exploited

  CVE-2019-17621Dec 30, 2019D-LinkEPSS 90.6%

  The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting t