G416 vulnerabilities

21 known vulnerabilities in G416 from D-Link. 21 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

21vulnerabilities

0critical

21high

0exploited

8.8average CVSS score

Latest first

8.8 High severity
G403: Use of Hard-coded Credentials
CVE-2024-6045Jun 17, 2024D-LinkEPSS 6.31%
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator c
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2024-5295May 23, 2024D-LinkEPSS 1.97%
D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit th
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50217May 3, 2024D-Link
D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulner
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50216May 3, 2024D-Link
D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to expl
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50215May 3, 2024D-Link
D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to explo
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50214May 3, 2024D-Link
D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to expl
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50213May 3, 2024D-Link
D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit
8.8 High severity
G416: Out-of-bounds Write
CVE-2023-50211May 3, 2024D-Link
D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is
8.8 High severity
G416: Out-of-bounds Write
CVE-2023-50210May 3, 2024D-Link
D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not
8.8 High severity
G416: Out-of-bounds Write
CVE-2023-50209May 3, 2024D-Link
D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exp
8.8 High severity
G416: Out-of-bounds Write
CVE-2023-50208May 3, 2024D-Link
D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50207May 3, 2024D-Link
D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vu
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50206May 3, 2024D-Link
D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50205May 3, 2024D-Link
D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vul
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50204May 3, 2024D-Link
D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to explo
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50203May 3, 2024D-Link
D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vul
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50202May 3, 2024D-Link
D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to e
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50201May 3, 2024D-Link
D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vul
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50200May 3, 2024D-Link
D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this v
8.8 High severity
G416: Missing Authentication for Critical Functionality
CVE-2023-50199May 3, 2024D-Link
D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required t
8.8 High severity
G416: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-50198May 3, 2024D-LinkEPSS 1.19%
D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this