D-Link Dir-809 Firmware vulnerabilities

9 CVEs affecting D-Link Dir-809 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33274, published 2021-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-8361: Realtek SDK Improper Input Validation Vulnerability, published 2015-05-01. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-09-18. EPSS: 100% chance of exploitation in the next 30 days. The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.
CVE-2021-33266, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 16.9% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualApp. This…
CVE-2021-33265, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 13.7% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80046eb4 in /formSetPortTr. This…
CVE-2021-33268, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_8003183C in /fromLogin. This…
CVE-2021-33274, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80040af8 in /formWlanSetup. This…
CVE-2021-33271, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_80046EB4 in /formSetPortTr. This…
CVE-2021-33270, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_800462c4 in /formAdvFirewall. This…
CVE-2021-33269, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualServ. This…
CVE-2021-33267, published 2021-12-01. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80034d60 in /formStaticDHCP. This…