Dir 822 Firmware

Vendor:

First CVE: Aug 25, 2016 · Active for 9 years

15

Total CVEs

More Total CVEs than 79% of tracked products

2.5

Avg CVEs / Year

Higher CVE frequency than 77% of tracked products

9.1

Avg CVSS

Higher Avg CVSS than 88% of tracked products

6.7%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Dir 822 Firmware over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 25, 2016

9 years ago

Most Recent CVE

Apr 27, 2026

92 days ago

CVE Severity & Scoring

Dir 822 Firmware15 CVEs

20%

73%

All CVEs353,240 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network15 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low15 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None15 (100.0%)

Unknown0 (0.0%)

Required0 (0.0%)

Privileges Required

Low1 (6.7%)

High0 (0.0%)

None14 (93.3%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (15 CVEs).

15 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2019-17621CRITICAL The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending	Dec 30, 2019	9.8	97	YES	YES
CVE-2016-6563CRITICAL Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP	Jul 13, 2018	9.8	87	NO	YES
CVE-2018-19986CRITICAL In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In t	May 13, 2019	9.8	54	NO	NO
CVE-2016-5681CRITICAL Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A	Aug 25, 2016	9.8	39	NO	NO
CVE-2018-19987CRITICAL D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices	May 13, 2019	9.8	36	NO	NO
CVE-2019-6258CRITICAL D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandl	Aug 18, 2020	9.8	32	NO	NO
CVE-2018-19990CRITICAL In the /HNAP1/SetWiFiVerifyAlpha message, the WPSPIN parameter is vulnerable, and the vulnerability affects D-Link DIR-822 B1 202KRb06 devices. In the SetWiFiVerifyAlpha.php source	May 13, 2019	9.8	32	NO	NO
CVE-2018-19989CRITICAL In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQ	May 13, 2019	9.8	32	NO	NO
CVE-2018-20675CRITICAL D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devi	Jan 9, 2019	9.8	31	NO	NO
CVE-2026-7067HIGH A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipula	Apr 27, 2026	7.3	28	NO	NO

View all 15 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (15 CVEs).

CISA KEV

1 CVE

6.7% of CVEs· Bottom 1%

Metasploit

2 CVEs

13.3% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

6.7% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (15 CVEs).

Media Mentions

Signals from CVEs in this product scope (15 CVEs).

Top CNAs Publishing CVEs For Dir 822 Firmware

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
3.10b06	2	9.8	9.2%
3.01	1	9.8	11.9%
202krb06	4	9.8	16.3%
1.0.2	2	9.8	1.5%
1.0.1	1	7.3	2.5%