Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-818lw_firmware:2.05.b03:*:*:*:*:*:*:*

part: o version: 2.05.b03 update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 818Lw Firmware (562fa449-eb32-51e7-aa06-e30ec4f685d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12787 vulnerable 2026-06-08 05:12:40.487883 Details available
An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.
Published: 2019-06-10T17:49:38.000Z
Updated: 2024-08-04T23:32:55.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12786 vulnerable 2026-06-08 05:12:40.485555 Details available
An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the IPAddress key.
Published: 2019-06-10T17:49:30.000Z
Updated: 2024-08-04T23:32:55.160Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20114 vulnerable 2026-06-08 05:11:26.675010 Details available
On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-6530.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T11:51:19.206Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.