D-Link DSL-225 Firmware vulnerabilities

2 CVEs affecting D-Link DSL-225 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-38438, published 2024-07-21.

More from D-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-38438, published 2024-07-21. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. D-Link - CWE-294: Authentication Bypass by Capture-replay
• CVE-2024-38437, published 2024-07-21. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel