Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dns-327l_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDns 327L Firmware (d876066a-5cd0-5ac4-9a2f-223481246912)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5312 vulnerable 2026-06-08 08:07:03.517373 D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control
MEDIUM (5.3)
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-04-01T20:30:15.569Z
Updated: 2026-04-02T13:13:05.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5311 vulnerable 2026-06-08 08:07:03.513769 D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control
MEDIUM (5.3)
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav_Access_List of the file /cgi-bin/file_center.cgi. Performing a manipulation of the argument cmd results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-04-01T19:45:14.221Z
Updated: 2026-04-02T15:27:57.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5215 vulnerable 2026-06-08 08:07:03.357236 D-Link DNS-1550-04 network_mgr.cgi cgi_get_ipv6 access control
MEDIUM (4.3)
A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The impacted element is the function cgi_get_ipv6 of the file /cgi-bin/network_mgr.cgi. Such manipulation leads to improper access controls. The exploit is publicly available and might be used.
Published: 2026-03-31T21:15:19.202Z
Updated: 2026-04-01T18:46:26.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5214 vulnerable 2026-06-08 08:07:03.351628 D-Link DNS-1550-04 account_mgr.cgi cgi_addgroup_get_group_quota_minsize stack-based overflow
HIGH (8.8)
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function cgi_addgroup_get_group_quota_minsize of the file /cgi-bin/account_mgr.cgi. The manipulation of the argument Name results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.
Published: 2026-03-31T21:15:14.464Z
Updated: 2026-04-01T15:53:13.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5213 vulnerable 2026-06-08 08:07:03.347039 D-Link DNS-1550-04 account_mgr.cgi cgi_adduser_to_session stack-based overflow
HIGH (8.8)
A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function cgi_adduser_to_session of the file /cgi-bin/account_mgr.cgi. This manipulation of the argument read_list causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-31T20:15:18.498Z
Updated: 2026-04-01T13:41:31.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5212 vulnerable 2026-06-08 08:07:03.341368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5211 vulnerable 2026-06-08 08:07:03.328146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4214 vulnerable 2026-06-08 08:05:12.977825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4213 vulnerable 2026-06-08 08:05:12.973371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4212 vulnerable 2026-06-08 08:05:12.968438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4211 vulnerable 2026-06-08 08:05:12.964186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4210 vulnerable 2026-06-08 08:05:12.960104 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4209 vulnerable 2026-06-08 08:05:12.955366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4207 vulnerable 2026-06-08 08:05:12.909174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4206 vulnerable 2026-06-08 08:05:12.904672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4205 vulnerable 2026-06-08 08:05:12.900349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4204 vulnerable 2026-06-08 08:05:12.895872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4203 vulnerable 2026-06-08 08:05:12.891533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4197 vulnerable 2026-06-08 08:05:12.855815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4196 vulnerable 2026-06-08 08:05:12.850218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4195 vulnerable 2026-06-08 08:05:12.845082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4194 vulnerable 2026-06-08 08:05:12.832452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8213 vulnerable 2026-06-08 07:00:23.099034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8212 vulnerable 2026-06-08 07:00:23.092670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8211 vulnerable 2026-06-08 07:00:23.084776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8210 vulnerable 2026-06-08 07:00:23.078497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8134 vulnerable 2026-06-08 07:00:22.535255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8133 vulnerable 2026-06-08 07:00:22.529003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8129 vulnerable 2026-06-08 07:00:22.411899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8128 vulnerable 2026-06-08 07:00:22.392060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7849 vulnerable 2026-06-08 06:58:23.681163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7832 vulnerable 2026-06-08 06:58:23.566569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7830 vulnerable 2026-06-08 06:58:23.549951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7828 vulnerable 2026-06-08 06:58:23.507635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7715 vulnerable 2026-06-08 06:58:23.216419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.