D-Link DSR-500N
Approved changes feed: RSS · Atom
cpe:2.3:h:dlink:dsr-500n:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dsr 500N (0a7b9ed6-25a3-5909-bdb5-5fad1acb651d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-39615 |
not_vulnerable | 2026-06-08 05:33:50.287440 |
Details available
D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be able to log in via SSH or Telnet and thus gain access to the underlying embedded Linux operating system on the device. Fixed in version 2.12/2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Published: 2021-08-23T21:21:47.000Z
Updated: 2024-08-04T02:13:37.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25759 |
not_vulnerable | 2026-06-08 05:23:49.371084 |
Details available
An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to a lack of validation of inputs provided in multipart HTTP POST requests.
Published: 2020-12-15T19:28:06.000Z
Updated: 2024-08-04T15:40:36.958Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25758 |
not_vulnerable | 2026-06-08 05:23:49.369344 |
Details available
An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into saved configurations before uploading. These entries are executed as root.
Published: 2020-12-15T19:27:55.000Z
Updated: 2024-08-04T15:40:36.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25757 |
not_vulnerable | 2026-06-08 05:23:49.357098 |
Details available
A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with root privileges. This affects DSR-150, DSR-250, DSR-500, and DSR-1000AC with firmware 3.14 and 3.17.
Published: 2020-12-15T19:27:32.000Z
Updated: 2024-08-04T15:40:36.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7005 |
vulnerable | 2026-06-08 05:05:07.743605 |
Details available
D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to obtain sensitive information by reading the Users[#]["Password"] fields in /tmp/teamf1.cfg.ascii.
Published: 2013-12-19T02:00:00.000Z
Updated: 2024-08-06T17:53:46.062Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7004 |
vulnerable | 2026-06-08 05:05:07.724611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5946 |
vulnerable | 2026-06-08 05:04:54.811640 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5945 |
not_vulnerable | 2026-06-08 05:04:54.756236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.