D-Link DAP-1650 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dap-1650_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDap 1650 Firmware (32805cda-c0c3-543a-83db-30bc0e829f8a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-40505 vulnerable 2026-06-08 06:43:52.317616 Details available
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component.
Published: 2024-07-16T00:00:00.000Z
Updated: 2024-10-28T20:42:48.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23625 vulnerable 2026-06-08 06:29:40.045684 D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability
CRITICAL (9.6)
A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Published: 2024-01-25T23:41:20.687Z
Updated: 2025-05-29T15:18:31.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23624 vulnerable 2026-06-08 06:29:40.043870 D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability
CRITICAL (9.6)
A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.
Published: 2024-01-25T23:41:18.424Z
Updated: 2025-06-17T21:19:30.921Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.