D-Link Dir-412 Firmware vulnerabilities

3 CVEs affecting D-Link Dir-412 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-25115, published 2025-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-25115, published 2025-08-27. Critical severity, CVSS 9.8. EPSS: 10.1% chance of exploitation in the next 30 days. Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows…
CVE-2019-17511, published 2019-10-14. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can get the router's log file via log_get.php, which could be used to discover the…
CVE-2019-17512, published 2019-10-16. Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days. There are some web interfaces without authentication requirements on D-Link DIR-412 A1-1.14WW routers. An attacker can clear the router's log file via act=clear&logtype=sysact to log_clear.php, which…