D-Link Dir-615jx10 Firmware vulnerabilities

3 CVEs affecting D-Link Dir-615jx10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-42627, published 2022-08-23.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-42627, published 2022-08-23. Critical severity, CVSS 9.8. EPSS: 63.1% chance of exploitation in the next 30 days. The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and…
• CVE-2020-9535, published 2020-03-02. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup_Wizard webpage parameter when f_radius_ip1 is malformed.
• CVE-2020-9534, published 2020-03-02. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed.