D-Link DWR-M961
Approved changes feed: RSS · Atom
cpe:2.3:h:dlink:dwr-m961:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dwr M961 (24ea8bbe-f709-5637-b0a4-90017f6d9288) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1625 |
not_vulnerable | 2026-06-08 07:49:09.043779 |
D-Link DWR-M961 SMS Message formSmsManage sub_4250E0 command injection
MEDIUM (6.3)
A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub_4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument action_value results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.
Published: 2026-01-29T22:02:13.222Z
Updated: 2026-02-23T09:07:33.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1624 |
not_vulnerable | 2026-06-08 07:49:09.043236 |
D-Link DWR-M961 formLtefotaUpgradeFibocom command injection
MEDIUM (6.3)
A security vulnerability has been detected in D-Link DWR-M961 1.1.47. The affected element is an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-01-29T22:02:10.195Z
Updated: 2026-02-23T09:07:19.760Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1596 |
not_vulnerable | 2026-06-08 07:49:08.974055 |
D-Link DWR-M961 formLtefotaUpgradeQuectel sub_419920 command injection
MEDIUM (6.3)
A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Published: 2026-01-29T15:32:11.790Z
Updated: 2026-02-23T09:05:29.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3785 |
not_vulnerable | 2026-06-08 07:23:09.884368 |
D-Link DWR-M961 Authorization Interface formStaticDHCP stack-based overflow
HIGH (8.8)
A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formStaticDHCP of the component Authorization Interface. The manipulation of the argument Hostname leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.49 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2025-04-18T08:31:05.721Z
Updated: 2025-04-18T12:00:14.339Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13305 |
not_vulnerable | 2026-06-08 07:04:31.963181 |
D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow
HIGH (8.8)
A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K and DIR-825M 1.01.07. This issue affects some unknown processing of the file /boafrm/formTracerouteDiagnosticRun. Executing manipulation of the argument host can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-11-17T23:02:06.147Z
Updated: 2025-11-18T14:41:07.089Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13304 |
not_vulnerable | 2026-06-08 07:04:31.955067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.