D-Link g416 Firmware vulnerabilities

21 CVEs affecting D-Link g416 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5295, published 2024-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-5295, published 2024-05-23. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416…
CVE-2023-50198, published 2024-05-03. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link G416 cfgsave Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416…
CVE-2023-50215, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
CVE-2023-50214, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 nodered tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations…
CVE-2023-50204, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…
CVE-2023-50203, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…
CVE-2023-50217, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416…
CVE-2023-50216, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations…
CVE-2023-50213, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of…
CVE-2023-50207, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…

Latest

CVE-2023-50212, published 2024-05-03. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected…
CVE-2023-50211, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-50210, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2023-50209, published 2024-05-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link…