Dir-895l Firmware vulnerabilities

2 known vulnerabilities in Dir-895l Firmware from D-Link. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  dir-895: Incorrect Authorization

  CVE-2023-36091Jul 31, 2023D-LinkEPSS 1.46%

  Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

• 9.8 Critical severity

  D-Link DIR-859 Router Command Execution Exploited

  CVE-2019-17621Dec 30, 2019D-LinkEPSS 90.6%

  The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting t