Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:g416_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductG416 Firmware (66266eb1-1ff8-5b33-8736-958617d6b8ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6045 vulnerable 2026-06-08 06:58:17.321126 D-Link router - Hidden Backdoor
HIGH (8.8)
Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the firmware.
Published: 2024-06-17T03:12:14.137Z
Updated: 2024-08-01T21:25:03.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5295 vulnerable 2026-06-08 06:56:15.455942 D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability
HIGH (8.8)
D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21294.
Published: 2024-05-23T21:29:52.609Z
Updated: 2024-08-01T21:11:12.437Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50217 vulnerable 2026-06-08 06:16:15.677504 D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability
HIGH (8.8)
D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21811.
Published: 2024-05-03T02:14:37.609Z
Updated: 2024-08-02T22:09:49.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50216 vulnerable 2026-06-08 06:16:15.676756 D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability
HIGH (8.8)
D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21810.
Published: 2024-05-03T02:14:36.859Z
Updated: 2024-08-02T22:09:49.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50215 vulnerable 2026-06-08 06:16:15.676181 D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability
HIGH (8.8)
D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21809.
Published: 2024-05-03T02:14:36.038Z
Updated: 2024-08-02T22:09:49.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50214 vulnerable 2026-06-08 06:16:15.675751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50213 vulnerable 2026-06-08 06:16:15.674954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50212 vulnerable 2026-06-08 06:16:15.674175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50211 vulnerable 2026-06-08 06:16:15.673697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50210 vulnerable 2026-06-08 06:16:15.673168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50209 vulnerable 2026-06-08 06:16:15.672589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50208 vulnerable 2026-06-08 06:16:15.672040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50207 vulnerable 2026-06-08 06:16:15.671553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50206 vulnerable 2026-06-08 06:16:15.671035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50205 vulnerable 2026-06-08 06:16:15.670475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50204 vulnerable 2026-06-08 06:16:15.669747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50203 vulnerable 2026-06-08 06:16:15.669210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50202 vulnerable 2026-06-08 06:16:15.668641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50201 vulnerable 2026-06-08 06:16:15.668234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50200 vulnerable 2026-06-08 06:16:15.667451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50199 vulnerable 2026-06-08 06:16:15.664979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50198 vulnerable 2026-06-08 06:16:15.662850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.