D-Link Di-624 vulnerabilities

3 CVEs affecting D-Link Di-624, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-3687, published 2006-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-3687, published 2006-07-21. High severity, CVSS 7.5. EPSS: 19.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router,…
CVE-2005-4723, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (device reboot) via a series of crafted fragmented UDP packets, possibly…
CVE-2004-0615, published 2004-12-06. Medium severity, CVSS 5.1. EPSS: 2.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary…