Dir 850l Firmware

Vendor:

First CVE: Sep 13, 2017 · Active for 8 years

27

Total CVEs

More Total CVEs than 96% of tracked products

5.4

Avg CVEs / Year

Higher CVE frequency than 91% of tracked products

7.9

Avg CVSS

Higher Avg CVSS than 71% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Dir 850l Firmware over time

Volume of CVEsAvg CVSS Base Score

First CVE

Sep 13, 2017

8 years ago

Most Recent CVE

Dec 19, 2023

952 days ago

CVE Severity & Scoring

Dir 850l Firmware27 CVEs

26%

48%

26%

All CVEs352,785 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local5 (18.5%)

Network21 (77.8%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network1 (3.7%)

Attack Complexity

Low24 (88.9%)

High3 (11.1%)

Unknown0 (0.0%)

User Interaction

None22 (81.5%)

Unknown0 (0.0%)

Required5 (18.5%)

Privileges Required

Low6 (22.2%)

High0 (0.0%)

None21 (77.8%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (27 CVEs).

27 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2016-6563CRITICAL Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP	Jul 13, 2018	9.8	87	NO	YES
CVE-2018-9032CRITICAL An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potential	Mar 27, 2018	9.8	56	NO	YES
CVE-2021-46378HIGH DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download.	Mar 4, 2022	7.5	52	NO	YES
CVE-2021-46379MEDIUM DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.	Mar 4, 2022	6.1	47	NO	YES
CVE-2018-20675CRITICAL D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devi	Jan 9, 2019	9.8	31	NO	NO
CVE-2017-14429CRITICAL The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenticated remote code exe	Sep 13, 2017	9.8	30	NO	NO
CVE-2018-20674HIGH D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devi	Jan 9, 2019	8.8	28	NO	NO
CVE-2017-14421CRITICAL D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks account upon device reset, which	Sep 13, 2017	9.8	28	NO	NO
CVE-2017-14417CRITICAL register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintended enrollment in mydlink Cloud S	Sep 13, 2017	9.8	28	NO	NO
CVE-2023-49004CRITICAL An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.	Dec 19, 2023	9.8	27	NO	NO

View all 27 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (27 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

3.7% of CVEs· 97th percentile

Nuclei

1 CVE

3.7% of CVEs· 97th percentile

ExploitDB

4 CVEs

14.8% of CVEs· 87th percentile

Social Chatter

Signals from CVEs in this product scope (27 CVEs).

Media Mentions

Signals from CVEs in this product scope (27 CVEs).

Top CNAs Publishing CVEs For Dir 850l Firmware

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
fw223wwb01	1	9.8	1.9%	0
fw114wwb07_h2ab	14	7.3	1.1%	0
2.22b02	2	9.3	2.2%	0
2.07.b05	1	8.8	5.6%	0
1.14b07	1	8.8	5.6%	0
1.09	1	7.5	2.6%	0
1.08trb03	2	6.8	23.8%	2