D-Link Dap-1860 Firmware vulnerabilities

6 CVEs affecting D-Link Dap-1860 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-45208, published 2023-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19597, published 2019-12-05. High severity, CVSS 8.8. EPSS: 20.8% chance of exploitation in the next 30 days. D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
CVE-2020-27864, published 2021-02-12. High severity, CVSS 8.8. EPSS: 10.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to…
CVE-2019-19598, published 2019-12-05. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP requests, part of the HNAP_AUTH header is…
CVE-2020-15631, published 2020-07-23. High severity, CVSS 8.0. EPSS: 2.9% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03_HOTFIX WiFi extenders. Although authentication is required to…
CVE-2020-27865, published 2021-02-12. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to…
CVE-2023-45208, published 2023-10-10. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repeater) to run shell…