D-Link DSL-3782 Firmware vulnerabilities

17 CVEs affecting D-Link DSL-3782 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-25896, published 2025-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44959, published 2023-10-10. High severity, CVSS 8.8. EPSS: 22.8% chance of exploitation in the next 30 days. An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page.
CVE-2018-8898, published 2018-05-23. Critical severity, CVSS 9.8. EPSS: 12.5% chance of exploitation in the next 30 days. A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT_77616E6771696F6E67") allows unauthenticated…
CVE-2018-17990, published 2019-04-01. High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days. An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp allows a remote authenticated attacker to execute arbitrary OS commands via the…
CVE-2022-34527, published 2022-07-29. High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days. D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte_4C0160.
CVE-2023-27216, published 2023-04-12. High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days. An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
CVE-2021-40284, published 2021-09-09. Medium severity, CVSS 6.5. EPSS: 2.6% chance of exploitation in the next 30 days. D-Link DSL-3782 EU v1.01:EU v1.03 is affected by a buffer overflow which can cause a denial of service. This vulnerability exists in the web interface "/cgi-bin/New_GUI/Igmp.asp". Authenticated…
CVE-2022-34528, published 2022-07-29. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue.
CVE-2022-35191, published 2022-08-23. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via a crafted HTTP connection request.
CVE-2022-35192, published 2022-08-26. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service (DoS) via the User parameter or Pwd parameter to…
CVE-2025-25895, published 2025-02-18. High severity, CVSS 8.0. EPSS: 1% chance of exploitation in the next 30 days. An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter. This vulnerability allows attackers to execute arbitrary operating system (OS) commands…

Latest

CVE-2025-25896, published 2025-02-18. Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parameters. This vulnerability allows attackers to cause a Denial of Service (DoS)…
CVE-2025-25894, published 2025-02-18. High severity, CVSS 8.0. EPSS: 1% chance of exploitation in the next 30 days. An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters. This vulnerability allows attackers to execute arbitrary operating system (OS)…
CVE-2025-25893, published 2025-02-18. High severity, CVSS 8.0. EPSS: 1% chance of exploitation in the next 30 days. An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute…
CVE-2025-25892, published 2025-02-18. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters. This vulnerability allows attackers to cause a Denial of Service…
CVE-2025-25891, published 2025-02-18. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service…
CVE-2024-56914, published 2025-01-22. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /New_GUI/ParentalControl.asp.