D-Link Dir-823 Pro Firmware vulnerabilities

8 CVEs affecting D-Link Dir-823 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-45729, published 2025-06-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-28573, published 2022-05-02. Critical severity, CVSS 9.8. EPSS: 28.2% chance of exploitation in the next 30 days. D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the…
CVE-2021-46454, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability allows attackers to execute arbitrary…
CVE-2021-46453, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability allows attackers to execute arbitrary…
CVE-2021-46452, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute…
CVE-2021-46457, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability allows attackers to execute arbitrary…
CVE-2021-46456, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary…
CVE-2021-46455, published 2022-02-04. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary…
CVE-2025-45729, published 2025-06-27. Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days. D-Link DIR-823-Pro 1.02 has improper permission control, allowing unauthorized users to turn on and access Telnet services.