Dlink Dir-809 Firmware vulnerabilities

9 known vulnerabilities affecting dlink/dir-809_firmware.

Total CVEs
9
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL9

Vulnerabilities

Page 1 of 1
CVE-2021-33266CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33266 [CRITICAL] CWE-787 CVE-2021-33266: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualApp. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33267CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33267 [CRITICAL] CWE-787 CVE-2021-33267: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33271CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33271 [CRITICAL] CWE-787 CVE-2021-33271: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33268CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33268 [CRITICAL] CWE-787 CVE-2021-33268: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33270CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33270 [CRITICAL] CWE-787 CVE-2021-33270: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_800462c4 in /formAdvFirewall. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33269CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33269 [CRITICAL] CWE-787 CVE-2021-33269: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualServ. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33274CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33274 [CRITICAL] CWE-787 CVE-2021-33274: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80040af8 in /formWlanSetup. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2021-33265CRITICALCVSS 9.8≤ 1.12wwb032021-12-01
CVE-2021-33265 [CRITICAL] CWE-787 CVE-2021-33265: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to conta D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request.
nvd
CVE-2014-8361CRITICALCVSS 9.8KEVPoC≤ 1.04b022015-05-01
CVE-2014-8361 [CRITICAL] CVE-2014-8361: The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a craf The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
nvd