GCVE - cpe:2.3:o:dlink:dwr-m921_firmware:1.1.50:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dwr-m921_firmware:1.1.50:*:*:*:*:*:*:*

part: o version: 1.1.50 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dwr M921 Firmware (`4b5d8975-083c-5d8a-84e3-27b0b393ac9b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-2169`	vulnerable	2026-06-08 07:55:16.660527	D-Link DWR-M921 formLtefotaUpgradeFibocom command injection MEDIUM (6.3) A vulnerability has been found in D-Link DWR-M921 1.1.50. This impacts an unknown function of the file /boafrm/formLtefotaUpgradeFibocom. Such manipulation of the argument fota_url leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2026-02-08T17:32:12.531Z Updated: 2026-02-23T09:45:58.460Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344871 https://vuldb.com/?ctiid.344871 https://vuldb.com/?submit.748930 https://github.com/LX-66-LX/cve-new/issues/3 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2168`	vulnerable	2026-06-08 07:55:16.659870	D-Link DWR-M921 formLtefotaUpgradeQuectel sub_419920 command injection MEDIUM (6.3) A flaw has been found in D-Link DWR-M921 1.1.50. This affects the function sub_419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fota_url causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Published: 2026-02-08T17:32:08.752Z Updated: 2026-02-23T09:45:43.557Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344870 https://vuldb.com/?ctiid.344870 https://vuldb.com/?submit.748838 https://github.com/LX-66-LX/cve-new/issues/2 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2085`	vulnerable	2026-06-08 07:55:16.508254	D-Link DWR-M921 USSD Configuration Endpoint formUSSDSetup sub_419F20 command injection HIGH (7.2) A security vulnerability has been detected in D-Link DWR-M921 1.1.50. Affected is the function sub_419F20 of the file /boafrm/formUSSDSetup of the component USSD Configuration Endpoint. The manipulation of the argument ussdValue leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Published: 2026-02-07T12:02:08.316Z Updated: 2026-02-23T09:32:00.509Z Open on db.gcve.eu Reference links https://vuldb.com/?id.344652 https://vuldb.com/?ctiid.344652 https://vuldb.com/?submit.746400 https://github.com/LX-66-LX/cve-new/issues/1 https://github.com/LX-66-LX/cve-new/issues/1#issue-3851345029	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13306`	vulnerable	2026-06-08 07:04:31.978630	D-Link DWR-M920/DWR-M921/DIR-822K/DIR-825M formDebugDiagnosticRun system command injection MEDIUM (6.3) A security vulnerability has been detected in D-Link DWR-M920, DWR-M921, DIR-822K and DIR-825M 1.1.5. Impacted is the function system of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Published: 2025-11-17T23:32:06.249Z Updated: 2025-11-18T16:36:07.550Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332646 https://vuldb.com/?ctiid.332646 https://vuldb.com/?submit.691813 https://vuldb.com/?submit.693805 https://vuldb.com/?submit.693807	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.