Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:di-500wf:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDi 500Wf (07a358a7-295f-5beb-af62-58a27ec5388e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9745 not_vulnerable 2026-06-08 07:47:09.693402 D-Link DI-500WF jhttpd version_upgrade.asp os command injection
MEDIUM (4.7)
A security vulnerability has been detected in D-Link DI-500WF 14.04.10A1T. The impacted element is an unknown function of the file /version_upgrade.asp of the component jhttpd. The manipulation of the argument path leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-08-31T20:32:07.802Z
Updated: 2025-09-02T15:13:06.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7194 not_vulnerable 2026-06-08 07:43:18.119594 D-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflow
HIGH (8.8)
A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ip_position.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T20:32:06.360Z
Updated: 2025-07-08T20:49:58.352Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.