D-Link Dwl-6610ap Firmware vulnerabilities

5 CVEs affecting D-Link Dwl-6610ap Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-43207, published 2023-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-43206, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler. This vulnerability allows attackers to execute arbitrary…
CVE-2023-43207, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler. This vulnerability allows attackers to execute arbitrary commands…
CVE-2023-43204, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50. This vulnerability allows attackers to execute arbitrary commands via the…
CVE-2023-43202, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler. This vulnerability allows attackers to execute arbitrary commands…
CVE-2023-43203, published 2023-09-20. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users.