Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-868l_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 868L Firmware (2df26dfb-4b90-5638-9ba9-265f0f07ac4b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20213 vulnerable 2026-06-08 05:13:30.588166 Details available
D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.
Published: 2020-01-02T01:03:16.000Z
Updated: 2024-08-05T02:39:09.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17621 vulnerable 2026-06-08 05:13:10.856421 Details available
The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.
Published: 2019-12-30T16:09:17.000Z
Updated: 2025-10-21T23:35:54.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16190 vulnerable 2026-06-08 05:13:07.871056 Details available
SharePort Web Access on D-Link DIR-868L REVB through 2.03, DIR-885L REVA through 1.20, and DIR-895L REVA through 1.21 devices allows Authentication Bypass, as demonstrated by a direct request to folder_view.php or category_view.php.
Published: 2019-09-09T19:54:36.000Z
Updated: 2024-08-05T01:10:41.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6530 vulnerable 2026-06-08 05:11:53.926192 Details available
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.
Published: 2018-03-06T20:00:00.000Z
Updated: 2025-10-21T23:45:55.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6529 vulnerable 2026-06-08 05:11:53.925378 Details available
XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-08-05T06:10:10.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6528 vulnerable 2026-06-08 05:11:53.924868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6527 vulnerable 2026-06-08 05:11:53.923553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5681 vulnerable 2026-06-08 05:07:57.465316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.