GCVE - cpe:2.3:h:dlink:dwr-921:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dwr-921:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dwr 921 (`197c5898-7d8e-5747-8c66-ee54b82111a2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-0717`	not_vulnerable	2026-06-08 06:22:01.936353	D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure MEDIUM (5.3) A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file /devinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice\|net\|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability. Published: 2024-01-19T15:31:04.290Z Updated: 2025-05-30T14:26:30.162Z Open on db.gcve.eu Reference links https://vuldb.com/?id.251542 https://vuldb.com/?ctiid.251542 https://github.com/999zzzzz/D-Link	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19300`	not_vulnerable	2026-06-08 05:11:15.608955	Details available On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware version 1.06b03, DWR-512 (B1) before firmware version 2.02b01, DWR-711 (A1) through firmware version 1.11, DWR-712 (B1) before firmware version 2.04b01, DWR-921 (A1) before firmware version 1.02b01, and DWR-921 (B1) before firmware version 2.03b01, there exists an EXCU_SHELL file in the web directory. By sending a GET request with specially crafted headers to the /EXCU_SHELL URI, an attacker could execute arbitrary shell commands in the root context on the affected device. Other devices might be affected as well. Published: 2019-04-11T15:22:44.000Z Updated: 2024-08-05T11:30:04.205Z Open on db.gcve.eu Reference links https://www.greenbone.net/schwerwiegende-sicherheitsluecke-in-d-link-routern-entdeckt/ https://community.greenbone.net/t/cve-2018-19300-remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers/1772 https://eu.dlink.com/de/de/support/support-news/2019/march/19/remote-command-execution-vulnerability-in-d-link-dwr-and-dap-routers https://www.greenbone.net/en/serious-vulnerability-discovered-in-d-link-routers/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18008`	not_vulnerable	2026-06-08 05:11:07.120977	Details available spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to discover admin credentials. Published: 2018-12-21T23:00:00.000Z Updated: 2024-08-05T11:01:14.925Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/106344 http://seclists.org/fulldisclosure/2018/Dec/45	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10824`	not_vulnerable	2026-06-08 05:10:37.145709	Details available An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. The administrative password is stored in plaintext in the /tmp/csman/0 file. An attacker having a directory traversal (or LFI) can easily get full router access. Published: 2018-10-17T14:00:00.000Z Updated: 2024-08-05T07:46:46.962Z Open on db.gcve.eu Reference links https://seclists.org/fulldisclosure/2018/Oct/36 http://sploit.tech/2018/10/12/D-Link.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10823`	not_vulnerable	2026-06-08 05:10:37.144998	Details available An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2.02, and DWR-111 through 1.01 devices. An authenticated attacker may execute arbitrary code by injecting the shell command into the chkisg.htm page Sip parameter. This allows for full control over the device internals. Published: 2018-10-17T14:00:00.000Z Updated: 2024-08-05T07:46:47.451Z Open on db.gcve.eu Reference links https://seclists.org/fulldisclosure/2018/Oct/36 http://sploit.tech/2018/10/12/D-Link.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10822`	not_vulnerable	2026-06-08 05:10:37.139164	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.