D-Link Dap-1360 Firmware vulnerabilities

16 CVEs affecting D-Link Dap-1360 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32146, published 2024-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0717, published 2024-01-19. Medium severity, CVSS 5.3. EPSS: 18.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820,…
CVE-2014-10026, published 2015-01-13. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.
CVE-2023-32137, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2023-32136, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32143, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32146, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32142, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32141, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32144, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32139, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…

Latest

CVE-2023-32145, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360…
CVE-2023-32140, published 2024-05-03. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32138, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…