Dir-880l Firmware vulnerabilities

3 known vulnerabilities in Dir-880l Firmware from D-Link. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DIR-880L: Improper Neutralization of Special Elements used in a Command

  CVE-2025-4341May 6, 2025D-LinkEPSS 24%

  A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_AD

• 9.8 Critical severity

  D-Link DIR-859 Router Command Execution Exploited

  CVE-2019-17621Dec 30, 2019D-LinkEPSS 90.6%

  The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting t

• 9.8 Critical severity

  D-Link Multiple Routers OS Command Injection Exploited

  CVE-2018-6530Mar 6, 2018D-LinkEPSS 96.7%

  OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous