{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T23:39:04.690Z",
  "tag": {
    "id": "d-link",
    "label": "D-Link",
    "isStack": false,
    "url": "https://pwn.watch/t/d-link",
    "feed": "https://pwn.watch/t/d-link/feed.xml"
  },
  "counts": {
    "incidents": 9,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 5
  },
  "incidents": [
    {
      "slug": "d-link-routers-cve-2022-37055",
      "title": "D-Link Routers: Routers Buffer Overflow Vulnerability",
      "url": "https://pwn.watch/i/d-link-routers-cve-2022-37055",
      "json": "https://pwn.watch/i/d-link-routers-cve-2022-37055.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "D-Link Routers",
      "tags": [
        "d-link",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-37055"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-12-08",
      "closedAt": "2025-12-08",
      "updatedAt": "2025-12-08",
      "summary": "D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-12-08.",
      "xPost": null
    },
    {
      "slug": "d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078",
      "title": "D-Link DCS-2530L and DCS-2670L Devices: 2 exploited vulnerabilities (CVE-2020-25078, CVE-2020-25079)",
      "url": "https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078",
      "json": "https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "D-Link DCS-2530L and DCS-2670L Devices",
      "tags": [
        "d-link",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2020-25078",
        "CVE-2020-25079"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-08-05",
      "closedAt": "2025-08-05",
      "updatedAt": "2025-08-05",
      "summary": "CVE-2020-25078: D-Link DCS-2530L and DCS-2670L devices contains an unspecified vulnerability that could allow for remote administrator password disclosure. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2020-25079: D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddns_enc.cgi. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-08-05.",
      "xPost": null
    },
    {
      "slug": "d-link-dnr-322l-cve-2022-40799",
      "title": "D-Link DNR-322L: DNR-322L Download of Code Without Integrity Check Vulnerability",
      "url": "https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799",
      "json": "https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "D-Link DNR-322L",
      "tags": [
        "d-link",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-40799"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-08-05",
      "closedAt": "2025-08-05",
      "updatedAt": "2025-08-05",
      "summary": "D-Link DNR-322L contains a download of code without integrity check vulnerability that could allow an authenticated attacker to execute OS level commands on the device. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-08-05.",
      "xPost": null
    },
    {
      "slug": "d-link-dir-859-router-cve-2024-0769",
      "title": "D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability",
      "url": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769",
      "json": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769.json",
      "status": "closed",
      "severity": "medium",
      "patchStatus": "patched",
      "product": "D-Link DIR-859 Router",
      "tags": [
        "d-link",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-0769"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-06-25",
      "closedAt": "2025-06-25",
      "updatedAt": "2025-06-25",
      "summary": "D-Link DIR-859 routers contain a path traversal vulnerability in the file /hedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions. Added to CISA KEV on 2025-06-25.",
      "xPost": null
    },
    {
      "slug": "d-link-dir-820-router-cve-2023-25280",
      "title": "D-Link DIR-820 Router OS Command Injection",
      "url": "https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280",
      "json": "https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "unpatched",
      "product": "D-Link DIR-820 Router",
      "tags": [
        "d-link",
        "router",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2023-25280"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "No fix: CISA says the product is end-of-life and should be retired"
      ],
      "startedAt": "2024-09-30",
      "closedAt": "2024-09-30",
      "updatedAt": "2024-09-30",
      "summary": "D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. Added to the CISA KEV catalog on 2024-09-30. CVE-2023-25280 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "d-link-dir-600-router-cve-2014-100005",
      "title": "D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)",
      "url": "https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005",
      "json": "https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "unpatched",
      "product": "D-Link DIR-600 Router",
      "tags": [
        "d-link",
        "router",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2014-100005"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "No fix: CISA says the product is end-of-life and should be retired"
      ],
      "startedAt": "2024-05-16",
      "closedAt": "2024-05-16",
      "updatedAt": "2024-05-16",
      "summary": "D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session. Added to the CISA KEV catalog on 2024-05-16. CVE-2014-100005 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "d-link-dir-605-router-cve-2021-40655",
      "title": "D-Link DIR-605 Router Information Disclosure",
      "url": "https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655",
      "json": "https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "unpatched",
      "product": "D-Link DIR-605 Router",
      "tags": [
        "d-link",
        "router",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2021-40655"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "No fix: CISA says the product is end-of-life and should be retired"
      ],
      "startedAt": "2024-05-16",
      "closedAt": "2024-05-16",
      "updatedAt": "2024-05-16",
      "summary": "D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page. Added to the CISA KEV catalog on 2024-05-16. CVE-2021-40655 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "d-link-multiple-nas-devices-cve-2024-3272-3273",
      "title": "D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273",
      "json": "https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "unpatched",
      "product": "D-Link Multiple NAS Devices",
      "tags": [
        "d-link",
        "nas",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2024-3272",
        "CVE-2024-3273"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "No fix: CISA says the product is end-of-life and should be retired"
      ],
      "startedAt": "2024-04-04",
      "closedAt": "2024-04-11",
      "updatedAt": "2024-04-11",
      "summary": "CVE-2024-3272: D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contains a hard-coded credential that allows an attacker to conduct authenticated command injection, leading to remote, unauthorized code execution. CVE-2024-3273: D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L contain a command injection vulnerability. When combined with CVE-2024-3272, this can lead to remote, unauthorized code execution. Added to the CISA KEV catalog on 2024-04-11.",
      "xPost": null
    },
    {
      "slug": "d-link-dsl-2750b-devices-cve-2016-20017",
      "title": "D-Link DSL-2750B Devices Command Injection",
      "url": "https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017",
      "json": "https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "D-Link DSL-2750B Devices",
      "tags": [
        "d-link",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2016-20017"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-08",
      "closedAt": "2024-01-08",
      "updatedAt": "2024-01-08",
      "summary": "D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter. Added to the CISA KEV catalog on 2024-01-08. CVE-2016-20017 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "d-link-routers-cve-2022-37055",
      "incidentTitle": "D-Link Routers: Routers Buffer Overflow Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-08",
      "title": "CISA added CVE-2022-37055 to the KEV catalog (due 2025-12-29).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/d-link-routers-cve-2022-37055"
    },
    {
      "incident": "d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078",
      "incidentTitle": "D-Link DCS-2530L and DCS-2670L Devices: 2 exploited vulnerabilities (CVE-2020-25078, CVE-2020-25079)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-08-05",
      "title": "CISA added CVE-2020-25078 to the KEV catalog (due 2025-08-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078"
    },
    {
      "incident": "d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078",
      "incidentTitle": "D-Link DCS-2530L and DCS-2670L Devices: 2 exploited vulnerabilities (CVE-2020-25078, CVE-2020-25079)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-08-05",
      "title": "CISA added CVE-2020-25079 to the KEV catalog (due 2025-08-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/d-link-dcs-2530l-and-dcs-2670l-devices-cve-2020-25078"
    },
    {
      "incident": "d-link-dnr-322l-cve-2022-40799",
      "incidentTitle": "D-Link DNR-322L: DNR-322L Download of Code Without Integrity Check Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-08-05",
      "title": "CISA added CVE-2022-40799 to the KEV catalog (due 2025-08-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/d-link-dnr-322l-cve-2022-40799"
    },
    {
      "incident": "d-link-dir-859-router-cve-2024-0769",
      "incidentTitle": "D-Link DIR-859 Router: D-Link DIR-859 Router Path Traversal Vulnerability",
      "severity": "medium",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-25",
      "title": "CISA added CVE-2024-0769 to the KEV catalog (due 2025-07-16).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/d-link-dir-859-router-cve-2024-0769"
    },
    {
      "incident": "d-link-dir-820-router-cve-2023-25280",
      "incidentTitle": "D-Link DIR-820 Router OS Command Injection",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-09-30",
      "title": "CISA added CVE-2023-25280 to the KEV catalog (federal deadline 2024-10-21)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280"
    },
    {
      "incident": "d-link-dir-600-router-cve-2014-100005",
      "incidentTitle": "D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-05-16",
      "title": "CISA added CVE-2014-100005 to the KEV catalog (federal deadline 2024-06-06)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005"
    },
    {
      "incident": "d-link-dir-605-router-cve-2021-40655",
      "incidentTitle": "D-Link DIR-605 Router Information Disclosure",
      "severity": "high",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-05-16",
      "title": "CISA added CVE-2021-40655 to the KEV catalog (federal deadline 2024-06-06)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655"
    },
    {
      "incident": "d-link-multiple-nas-devices-cve-2024-3272-3273",
      "incidentTitle": "D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-04-11",
      "title": "CISA added CVE-2024-3272 to the KEV catalog (federal deadline 2024-05-02)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273"
    },
    {
      "incident": "d-link-multiple-nas-devices-cve-2024-3272-3273",
      "incidentTitle": "D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-04-11",
      "title": "CISA added CVE-2024-3273 to the KEV catalog (federal deadline 2024-05-02)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273"
    },
    {
      "incident": "d-link-multiple-nas-devices-cve-2024-3272-3273",
      "incidentTitle": "D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-04-04",
      "title": "CVE-2024-3272 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-3272",
      "url": "https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273"
    },
    {
      "incident": "d-link-multiple-nas-devices-cve-2024-3272-3273",
      "incidentTitle": "D-Link Multiple NAS Devices: 2 actively exploited vulnerabilities",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "unpatched",
      "date": "2024-04-04",
      "title": "CVE-2024-3273 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-3273",
      "url": "https://pwn.watch/i/d-link-multiple-nas-devices-cve-2024-3272-3273"
    },
    {
      "incident": "d-link-dsl-2750b-devices-cve-2016-20017",
      "incidentTitle": "D-Link DSL-2750B Devices Command Injection",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-08",
      "title": "CISA added CVE-2016-20017 to the KEV catalog (federal deadline 2024-01-29)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/d-link-dsl-2750b-devices-cve-2016-20017"
    }
  ]
}