D-Link Dcs-960l Firmware vulnerabilities

3 CVEs affecting D-Link Dcs-960l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-48168, published 2024-10-14.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-17146, published 2020-01-07. Critical severity, CVSS 9.8. EPSS: 9.5% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link DCS-960L v1.07.102. Authentication is not required to exploit this vulnerability. The specific…
• CVE-2024-48168, published 2024-10-14. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in the sub_402280 function of the HNAP service of D-Link DCS-960L 1.09, allowing an attacker to execute arbitrary code.
• CVE-2024-44589, published 2024-09-18. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Stack overflow vulnerability in the Login function in the HNAP service in D-Link DCS-960L with firmware 1.09 allows attackers to execute of arbitrary code.