D-Link DSL-2680 Firmware vulnerabilities

5 CVEs affecting D-Link DSL-2680 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19226, published 2020-03-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-19223, published 2020-03-04. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot the router by submitting a reboot.html GET request without…
CVE-2019-19226, published 2020-03-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to enable or disable MAC address filtering by submitting a crafted…
CVE-2019-19225, published 2020-03-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to change DNS servers without being authenticated on the admin…
CVE-2019-19224, published 2020-03-04. High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days. A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to download the configuration (binary file) settings by submitting a…
CVE-2019-19222, published 2020-03-04. Medium severity, CVSS 5.4. EPSS: 1.9% chance of exploitation in the next 30 days. A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitrary JavaScript code into the info.html administration page…