D-Link Dwr-2000m Firmware vulnerabilities

4 CVEs affecting D-Link Dwr-2000m Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28731, published 2024-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-28726, published 2024-11-12. High severity, CVSS 8.0. EPSS: 8.6% chance of exploitation in the next 30 days. An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted payload to the Diagnostics function.
CVE-2024-28729, published 2024-11-12. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to execute arbitrary code via a crafted request.
CVE-2024-28730, published 2024-11-12. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to obtain sensitive information via the file upload…
CVE-2024-28731, published 2024-11-12. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M_1.34ME allows a local attacker to obtain sensitive information via the Port…