D-Link Dir-619 Firmware vulnerabilities

8 CVEs affecting D-Link Dir-619 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27295, published 2022-04-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27293, published 2022-04-10. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
CVE-2022-27291, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the…
CVE-2022-27290, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
CVE-2022-27289, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
CVE-2022-27288, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.
CVE-2022-27294, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage…
CVE-2022-27295, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.
CVE-2022-27292, published 2022-04-10. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of Service (DoS) via the nextPage…