D-Link DIR-859 a3 Firmware vulnerabilities

3 CVEs affecting D-Link DIR-859 a3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-57045, published 2025-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-57045, published 2025-02-18. Critical severity, CVSS 9.8. EPSS: 32.2% chance of exploitation in the next 30 days. A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password…
CVE-2019-17508, published 2019-10-11. Critical severity, CVSS 9.8. EPSS: 15.8% chance of exploitation in the next 30 days. On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.
CVE-2022-25106, published 2022-03-04. Medium severity, CVSS 5.5. EPSS: 8.6% chance of exploitation in the next 30 days. D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted…