CVE-2018-7859: D-Link Dgs-1510-20 Firmware

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit.

Affected products

• D-Link Dgs-1510-20 Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-28 Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-28p Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-28x Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-28xmp Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-52 Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-52x Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only
• D-Link Dgs-1510-52xmp Firmware: up to and including 1.31.b003; version 1.20.011 only; version 1.30.007 only

Published 2019-12-30. Last modified 2026-06-17.