GCVE - cpe:2.3:o:dlink:r15_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:r15_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	R15 Firmware (`01fcd783-18bc-588f-848e-f18be982a797`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60854`	vulnerable	2026-06-08 07:37:27.391413	Details available A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T15:08:44.738Z Open on db.gcve.eu Reference links https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10473	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6045`	vulnerable	2026-06-08 06:58:17.328326	D-Link router - Hidden Backdoor HIGH (8.8) Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware. Published: 2024-06-17T03:12:14.137Z Updated: 2024-08-01T21:25:03.244Z Open on db.gcve.eu Reference links https://www.twcert.org.tw/tw/cp-132-7879-da630-1.html https://www.twcert.org.tw/en/cp-139-7880-629f5-2.html https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41603`	vulnerable	2026-06-08 06:11:06.229565	Details available D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6. Published: 2024-01-10T00:00:00.000Z Updated: 2025-06-17T16:08:04.592Z Open on db.gcve.eu Reference links https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10347	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.