Dlink Dap-1650 Firmware vulnerabilities

4 known vulnerabilities affecting dlink/dap-1650_firmware.

Total CVEs

4

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL4

Vulnerabilities

Page 1 of 1

CVE-2024-40505CRITICALCVSS 9.3v1.032024-07-16

CVE-2024-40505 [CRITICAL] CWE-35 CVE-2024-40505: Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to esca Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component.

CVE-2022-36588CRITICALCVSS 9.8v1.04b02_j65h2022-09-08

CVE-2022-36588 [CRITICAL] CWE-120 CVE-2022-36588: In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow v In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.

CVE-2019-12768CRITICALCVSS 9.8fixed in 1.04b02_j65h2020-12-30

CVE-2019-12768 [CRITICAL] CWE-425 CVE-2019-12768: An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Att An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing.

CVE-2019-12767CRITICALCVSS 9.8fixed in 1.04b02_j65h2020-03-21

CVE-2019-12767 [CRITICAL] CWE-78 CVE-2019-12767: An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execut An issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can execute arbitrary commands.