D-Link DNS-327l Firmware vulnerabilities

3 CVEs affecting D-Link DNS-327l Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-7860, published 2017-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-7859, published 2017-08-25. Critical severity, CVSS 9.8. EPSS: 20.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows…
CVE-2014-7857, published 2017-08-25. Critical severity, CVSS 9.8. EPSS: 15.2% chance of exploitation in the next 30 days. D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass…
CVE-2014-7860, published 2017-08-25. Medium severity, CVSS 5.3. EPSS: 9.6% chance of exploitation in the next 30 days. The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obtain arbitrary photos…