Dir 865l Firmware
Vendor:
First CVE: Nov 20, 2013 · Active for 12 years
18
Total CVEs
More Total CVEs than 93% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 66% of tracked products
11.1%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Dir 865l Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 20, 2013
12 years ago
Most Recent CVE
Sep 19, 2020
2,138 days ago
CVE Severity & Scoring
Dir 865l Firmware18 CVEs
39%
44%
17%
All CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network15 (83.3%)
Unknown1 (5.6%)
Physical0 (0.0%)
Adjacent Network2 (11.1%)
Attack Complexity
Low16 (88.9%)
High1 (5.6%)
Unknown1 (5.6%)
User Interaction
None12 (66.7%)
Unknown1 (5.6%)
Required5 (27.8%)
Privileges Required
Low1 (5.6%)
High0 (0.0%)
None16 (88.9%)
Unknown1 (5.6%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-17621CRITICAL The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending | Dec 30, 2019 | 9.8 | 97 | YES | YES |
CVE-2018-6530CRITICAL OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 a | Mar 6, 2018 | 9.8 | 97 | YES | YES |
CVE-2020-13782HIGH D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection. | Jun 3, 2020 | 8.8 | 34 | NO | NO |
CVE-2020-13786HIGH D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF. | Jun 3, 2020 | 8.8 | 27 | NO | NO |
CVE-2013-3095MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of ad | Nov 20, 2013 | 6.8 | 26 | NO | YES |
CVE-2019-20213HIGH D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. | Jan 2, 2020 | 7.5 | 25 | NO | NO |
CVE-2020-13783HIGH D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information. | Jun 3, 2020 | 7.5 | 24 | NO | NO |
CVE-2013-4857CRITICAL D-Link DIR-865L has PHP File Inclusion in the router xml file. | Oct 25, 2019 | 9.8 | 24 | NO | NO |
CVE-2013-4855HIGH D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share. | Oct 25, 2019 | 8.8 | 22 | NO | NO |
CVE-2020-25786MEDIUM webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no | Sep 19, 2020 | 6.1 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
2 CVEs
11.1% of CVEs· 99th percentile
Metasploit
1 CVE
5.6% of CVEs· 97th percentile
Nuclei
1 CVE
5.6% of CVEs· 97th percentile
ExploitDB
1 CVE
5.6% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Dir 865l Firmware
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.20b01 | 6 | 7.9 | 5.2% | 0 | 0 |
| 1.08b01 | 1 | 6.1 | 1.0% | 0 | 0 |
| 1.03 | 2 | 6.3 | 1.3% | 0 | 1 |
| 1.02 | 1 | 6.8 | 1.2% | 0 | 1 |
| 1.00b24 | 1 | 6.8 | 1.2% | 0 | 1 |