Dir865l
Vendor:
First CVE: Nov 20, 2013 · Active for 12 years
18
Total CVEs
More Total CVEs than 49% of tracked products
4.5
Avg CVEs / Year
Bottom 1%
7.6
Avg CVSS
Higher Avg CVSS than 27% of tracked products
11.1%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dir865l over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 20, 2013
12 years ago
Most Recent CVE
Sep 19, 2020
2,136 days ago
CVE Severity & Scoring
Dir865l18 CVEs
39%
44%
17%
All CVEs352,713 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network15 (83.3%)
Unknown1 (5.6%)
Physical0 (0.0%)
Adjacent Network2 (11.1%)
Attack Complexity
Low16 (88.9%)
High1 (5.6%)
Unknown1 (5.6%)
User Interaction
None12 (66.7%)
Unknown1 (5.6%)
Required5 (27.8%)
Privileges Required
Low1 (5.6%)
High0 (0.0%)
None16 (88.9%)
Unknown1 (5.6%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-17621CRITICAL The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending | Dec 30, 2019 | 9.8 | 97 | YES | YES |
CVE-2018-6530CRITICAL OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 a | Mar 6, 2018 | 9.8 | 97 | YES | YES |
CVE-2020-13782HIGH D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection. | Jun 3, 2020 | 8.8 | 34 | NO | NO |
CVE-2020-13786HIGH D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF. | Jun 3, 2020 | 8.8 | 27 | NO | NO |
CVE-2013-3095MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of ad | Nov 20, 2013 | 6.8 | 26 | NO | YES |
CVE-2019-20213HIGH D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. | Jan 2, 2020 | 7.5 | 25 | NO | NO |
CVE-2020-13783HIGH D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information. | Jun 3, 2020 | 7.5 | 24 | NO | NO |
CVE-2013-4857CRITICAL D-Link DIR-865L has PHP File Inclusion in the router xml file. | Oct 25, 2019 | 9.8 | 24 | NO | NO |
CVE-2013-4855HIGH D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share. | Oct 25, 2019 | 8.8 | 22 | NO | NO |
CVE-2020-25786MEDIUM webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no | Sep 19, 2020 | 6.1 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
2 CVEs
11.1% of CVEs· Bottom 1%
Metasploit
1 CVE
5.6% of CVEs· Bottom 1%
Nuclei
1 CVE
5.6% of CVEs· Bottom 1%
ExploitDB
1 CVE
5.6% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Dir865l
Top CWEs
Versions
No cataloged versions.