D-Link DIR-859 Firmware vulnerabilities

8 CVEs affecting D-Link DIR-859 Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0769, published 2024-01-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-17621: D-Link DIR-859 Router Command Execution Vulnerability, published 2019-12-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2023-06-29. EPSS: 89.6% chance of exploitation in the next 30 days. The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted…
CVE-2024-0769: D-Link DIR-859 Router Path Traversal Vulnerability, published 2024-01-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2025-06-25. EPSS: 82.7% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the…
CVE-2019-20215, published 2020-01-29. Critical severity, CVSS 9.8. EPSS: 75.1% chance of exploitation in the next 30 days. D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because HTTP_ST is mishandled.…
CVE-2022-25106, published 2022-03-04. Medium severity, CVSS 5.5. EPSS: 8.6% chance of exploitation in the next 30 days. D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted…
CVE-2019-20216, published 2020-01-29. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because REMOTE_PORT is…
CVE-2019-20217, published 2020-01-29. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in /htdocs/cgibin, because SERVER_ID is…
CVE-2019-20213, published 2020-01-02. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
CVE-2023-36092, published 2023-07-31. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no…