GCVE - cpe:2.3:h:dlink:dap-1650:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dap-1650:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dap 1650 (`160427e9-f061-5a5c-a48f-50d2a718ab80`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-40505`	not_vulnerable	2026-06-08 06:43:52.323437	Details available Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component. Published: 2024-07-16T00:00:00.000Z Updated: 2024-10-28T20:42:48.340Z Open on db.gcve.eu Reference links https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10266 https://coldwx.github.io/CVE-2024-40505.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23625`	not_vulnerable	2026-06-08 06:29:40.045713	D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability CRITICAL (9.6) A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. Published: 2024-01-25T23:41:20.687Z Updated: 2025-05-29T15:18:31.325Z Open on db.gcve.eu Reference links https://blog.exodusintel.com/2024/01/25/d-link-dap-1650-subscribe-callback-command-injection-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23624`	not_vulnerable	2026-06-08 06:29:40.044903	D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability CRITICAL (9.6) A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root. Published: 2024-01-25T23:41:18.424Z Updated: 2025-06-17T21:19:30.921Z Open on db.gcve.eu Reference links https://blog.exodusintel.com/2024/01/25/d-link-dap-1650-gena-cgi-subscribe-command-injection-vulnerability/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36588`	not_vulnerable	2026-06-08 05:46:07.584763	Details available In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy. Published: 2022-09-07T23:45:17.000Z Updated: 2024-08-03T10:07:34.599Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://support.dlink.com/ProductInfo.aspx?m=DAP-1650 https://github.com/Davidteeri/Bug-Report/blob/main/dlink-dap1650-0x419EF8.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12768`	not_vulnerable	2026-06-08 05:12:40.453562	Details available An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing. Published: 2020-12-30T19:26:30.000Z Updated: 2024-08-04T23:32:54.950Z Open on db.gcve.eu Reference links ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DAP-1650/REVA/DAP-1650_REVA_RELEASE_NOTES_v1.04B02_J65H.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12767`	not_vulnerable	2026-06-08 05:12:40.453135	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.