CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 21–26 of 26 records

CVE Vendor Product Added Due Status
CVE-2016-11021 — D-Link DCS-930L Devices OS Command Injection Vulnerability
setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command.
 D-Link DCS-930L Devices Mar 25, 2022 Apr 15, 2022
CVE-2019-16920 — D-Link Multiple Routers Command Injection Vulnerability
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.
 D-Link Multiple Routers Mar 25, 2022 Apr 15, 2022
CVE-2020-9377 — D-Link DIR-610 Devices Remote Command Execution
D-Link DIR-610 devices allow remote code execution via the cmd parameter to command.php.
 D-Link DIR-610 Devices Mar 25, 2022 Apr 15, 2022
CVE-2015-2051 — D-Link DIR-645 Router Remote Code Execution Vulnerability
D-Link DIR-645 Wired/Wireless Router allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP interface.
 D-Link DIR-645 Router Feb 10, 2022 Aug 10, 2022
CVE-2020-25506 — D-Link DNS-320 Device Command Injection Vulnerability
D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.
 D-Link DNS-320 Device Nov 3, 2021 May 3, 2022
CVE-2020-29557 — D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution.
 D-Link DIR-825 R1 Devices Nov 3, 2021 May 3, 2022