D-Link Dir-822 Firmware vulnerabilities

13 CVEs affecting D-Link Dir-822 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-7067, published 2026-04-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability, published 2019-12-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-06-29. EPSS: 89.6% chance of exploitation in the next 30 days. The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted…
CVE-2016-6563, published 2018-07-13. Critical severity, CVSS 9.8. EPSS: 79.7% chance of exploitation in the next 30 days. Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action,…
CVE-2024-0717, published 2024-01-19. Medium severity, CVSS 5.3. EPSS: 18.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820,…
CVE-2018-19987, published 2019-05-13. Critical severity, CVSS 9.8. EPSS: 12.9% chance of exploitation in the next 30 days. D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle…
CVE-2016-5681, published 2016-08-25. Critical severity, CVSS 9.8. EPSS: 11.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before…
CVE-2018-19989, published 2019-05-13. Critical severity, CVSS 9.8. EPSS: 5.5% chance of exploitation in the next 30 days. In the /HNAP1/SetQoSSettings message, the uplink parameter is vulnerable, and the vulnerability affects D-Link DIR-822 Rev.B 202KRb06 and DIR-822 Rev.C 3.10B06 devices. In the SetQoSSettings.php…
CVE-2026-7067, published 2026-04-27. High severity, CVSS 7.3. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability was determined in D-Link DIR-822 A_101. The impacted element is the function system of the file /udhcpcd/dhcpd.c of the component udhcpd DHCP Service. This manipulation of the…
CVE-2018-20674, published 2019-01-09. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow…
CVE-2019-20213, published 2020-01-02. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
CVE-2023-51984, published 2024-01-11. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attackers to execute arbitrary commands via shell.

Latest

CVE-2024-25331, published 2024-03-12. Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days. DIR-822 Rev. B Firmware v2.02KRB09 and DIR-822-CA Rev. B Firmware v2.03WWb01 suffer from a LAN-Side Unauthenticated Remote Code Execution (RCE) vulnerability elevated from HNAP Stack-Based Buffer…
CVE-2023-51987, published 2024-01-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords.
CVE-2018-20675, published 2019-01-09. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow…