D-Link vulnerabilities

We track 922 vulnerabilities in D-Link products across 60+ products. 920 are rated high or critical, and 28 have been exploited in real attacks. The most recent was published on November 10, 2026.

922vulnerabilities

309critical

611high

28exploited

8.8average CVSS score

Latest D-Link vulnerabilities

8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41211May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticPrefixLength Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. A
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41210May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS2 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentic
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41209May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticDNS1 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentic
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41208May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticDefaultGateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers.
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41207May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6StaticSettings StaticAddress Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authen
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41206May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetHostIPv6Settings IPv6Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41205May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings SubnetMask Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41204May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings SecondaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication i
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41203May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings PrimaryDNS Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is
8.8 High severity
DAP-1325: Out-of-bounds Write
CVE-2023-41202May 3, 2024D-LinkEPSS 1.05%
D-Link DAP-1325 SetAPLanSettings Mode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not re
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41201May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetSetupWizardStatus Enabled Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41200May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticPrefixLength Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authen
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41199May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS2 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41198May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDNS1 Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41197May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticDefaultGateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Auth
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41196May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6StaticSettings StaticAddress Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authenticat
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41195May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetHostIPv6Settings IPv6Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41194May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings SubnetMask Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not r
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41193May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings SecondaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41192May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings PrimaryDNS Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not r
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41191May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings Mode Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not require
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41190May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings IPAddr Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not requi
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41189May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings Gateway Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not requ
8.8 High severity
DAP-1325: Improper Neutralization of Special Elements used in an OS Command
CVE-2023-41188May 3, 2024D-LinkEPSS 1.43%
D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not r
8.8 High severity
DAP-1325: Missing Authentication for Critical Functionality
CVE-2023-41187May 3, 2024D-LinkEPSS 1.01%
D-Link DAP-1325 HNAP Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37326May 3, 2024D-Link
D-Link DAP-2622 DDP Set Wireless Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentica
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37324May 3, 2024D-LinkEPSS 1.08%
D-Link DAP-2622 DDP Set Wireless Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentica
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37323May 3, 2024D-LinkEPSS 1.07%
D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not re
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37322May 3, 2024D-Link
D-Link DAP-2622 DDP Set SSID List RADIUS Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37321May 3, 2024D-Link
D-Link DAP-2622 DDP Set SSID List RADIUS Secret Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37320May 3, 2024D-Link
D-Link DAP-2622 DDP Set SSID List SSID Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37319May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not req
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37318May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv6 Address Secondary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37317May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticatio
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37316May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv6 Address Default Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentic
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37315May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv6 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37314May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv6 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37313May 3, 2024D-Link
D-Link DAP-2622 DDP Set IPv4 Address Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticat
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37312May 3, 2024D-Link
D-Link DAP-2622 DDP Set Device Info Device Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication
8.8 High severity
DAP-2622: Out-of-bounds Write
CVE-2023-37311May 3, 2024D-Link
D-Link DAP-2622 DDP Set Device Info Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authenticati