D-Link Dir-2150 Firmware vulnerabilities

17 CVEs affecting D-Link Dir-2150 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5291, published 2024-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-0717, published 2024-01-19. Medium severity, CVSS 5.3. EPSS: 18.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820,…
CVE-2022-3210, published 2023-03-29. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this…
CVE-2024-5291, published 2024-05-23. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-34281, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-34280, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-34278, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-34277, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-34276, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…
CVE-2023-34275, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
CVE-2022-40720, published 2023-01-26. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routers. Authentication is not required to exploit this…

Latest

CVE-2023-44415, published 2024-05-03. High severity, CVSS 8.0. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…
CVE-2023-34282, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on…
CVE-2023-34279, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected…