D-Link Dap-2020 Firmware vulnerabilities

18 CVEs affecting D-Link Dap-2020 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32146, published 2024-05-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-27250, published 2021-04-14. Medium severity, CVSS 6.5. EPSS: 67.4% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to…
CVE-2021-27249, published 2021-04-14. High severity, CVSS 8.8. EPSS: 5.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit…
CVE-2021-27248, published 2021-04-14. High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit…
CVE-2021-34863, published 2021-10-25. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this…
CVE-2021-34860, published 2021-10-25. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this…
CVE-2023-32137, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2023-32136, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32143, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32146, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32142, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…

Latest

CVE-2023-32145, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360…
CVE-2023-32144, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32141, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32140, published 2024-05-03. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-32139, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
CVE-2023-32138, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…