DIR-X3260 vulnerabilities

12 known vulnerabilities in DIR-X3260 from D-Link. 12 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

12vulnerabilities

0critical

12high

0exploited

8.3average CVSS score

Latest first

8.0 High severity
DIR-X3260: Out-of-bounds Write
CVE-2023-51613May 3, 2024D-LinkEPSS 1.14%
D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authenticatio
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44427May 3, 2024D-LinkEPSS 1.37%
D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authent
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44426May 3, 2024D-LinkEPSS 1.37%
D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentic
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44425May 3, 2024D-LinkEPSS 1.71%
D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenticatio
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44424May 3, 2024D-LinkEPSS 1.71%
D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44423May 3, 2024D-LinkEPSS 1.71%
D-Link DIR-X3260 SetTriggerPPPoEValidate Password Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenticati
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44422May 3, 2024D-LinkEPSS 1.71%
D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication
8.0 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-44421May 3, 2024D-LinkEPSS 1.71%
D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authenticati
8.8 High severity
DIR-X3260: Incorrect Implementation of Authentication Algorithm
CVE-2023-44420May 3, 2024D-LinkEPSS 1%
D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-X3260 routers. Authenticat
8.8 High severity
DIR-X3260: Out-of-bounds Write
CVE-2023-44419May 3, 2024D-Link
D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to e
8.8 High severity
DIR-X3260: Out-of-bounds Write
CVE-2023-44418May 3, 2024D-Link
D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to ex
8.8 High severity
DIR-X3260: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-35723May 3, 2024D-LinkEPSS 1.47%
D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to