D-Link Dir-867 Firmware vulnerabilities

6 CVEs affecting D-Link Dir-867 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6334, published 2025-06-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8864, published 2020-03-23. High severity, CVSS 8.8. EPSS: 80.2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not…
CVE-2020-8863, published 2020-03-23. High severity, CVSS 8.8. EPSS: 76.7% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not…
CVE-2023-24762, published 2023-03-13. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.
CVE-2022-1262, published 2022-04-11. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.
CVE-2022-41140, published 2023-01-26. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this vulnerability. The…
CVE-2025-6334, published 2025-06-20. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in D-Link DIR-867 1.0 and classified as critical. This vulnerability affects the function strncpy of the component Query String Handler. The manipulation leads to…