Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-816l_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 816L Firmware (dacda41f-224b-573b-af1f-1289aae95843)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7836 vulnerable 2026-06-08 07:45:18.299445 D-Link DIR-816L Environment Variable cgibin lxmldbc_system command injection
MEDIUM (6.3)
A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbc_system of the file /htdocs/cgibin of the component Environment Variable Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-07-19T16:44:06.551Z
Updated: 2025-07-21T15:57:08.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5999 vulnerable 2026-06-08 05:06:51.127921 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.
Published: 2015-11-18T16:00:00.000Z
Updated: 2024-08-06T07:06:35.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.