Dir 850l
Vendor:
First CVE: Aug 25, 2016 · Active for 9 years
29
Total CVEs
More Total CVEs than 96% of tracked products
4.8
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dir 850l over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 25, 2016
9 years ago
Most Recent CVE
Dec 19, 2023
949 days ago
CVE Severity & Scoring
Dir 850l29 CVEs
24%
48%
28%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local5 (17.2%)
Network23 (79.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (3.4%)
Attack Complexity
Low26 (89.7%)
High3 (10.3%)
Unknown0 (0.0%)
User Interaction
None24 (82.8%)
Unknown0 (0.0%)
Required5 (17.2%)
Privileges Required
Low6 (20.7%)
High0 (0.0%)
None23 (79.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (29 CVEs).
29 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-6563CRITICAL Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP | Jul 13, 2018 | 9.8 | 87 | NO | YES |
CVE-2018-9032CRITICAL An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potential | Mar 27, 2018 | 9.8 | 56 | NO | YES |
CVE-2021-46378HIGH DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download. | Mar 4, 2022 | 7.5 | 52 | NO | YES |
CVE-2021-46379MEDIUM DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site. | Mar 4, 2022 | 6.1 | 47 | NO | YES |
CVE-2016-5681CRITICAL Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A | Aug 25, 2016 | 9.8 | 39 | NO | NO |
CVE-2018-20675CRITICAL D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devi | Jan 9, 2019 | 9.8 | 31 | NO | NO |
CVE-2017-14429CRITICAL The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenticated remote code exe | Sep 13, 2017 | 9.8 | 30 | NO | NO |
CVE-2018-20674HIGH D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devi | Jan 9, 2019 | 8.8 | 28 | NO | NO |
CVE-2017-14421CRITICAL D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which | Sep 13, 2017 | 9.8 | 28 | NO | NO |
CVE-2017-14417CRITICAL register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud S | Sep 13, 2017 | 9.8 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (29 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
3.4% of CVEs· 96th percentile
Nuclei
1 CVE
3.4% of CVEs· 97th percentile
ExploitDB
4 CVEs
13.8% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (29 CVEs).
Media Mentions
Signals from CVEs in this product scope (29 CVEs).
Top CNAs Publishing CVEs For Dir 850l
Top CWEs
Versions
No cataloged versions.