GCVE - cpe:2.3:h:dlink:dir-895r:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-895r:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 895R (`114443ce-7a8f-51c2-9a72-5ee136cb24cc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-20213`	not_vulnerable	2026-06-08 05:13:30.597175	Details available D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. Published: 2020-01-02T01:03:16.000Z Updated: 2024-08-05T02:39:09.121Z Open on db.gcve.eu Reference links https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17621`	not_vulnerable	2026-06-08 05:13:10.870144	Details available The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. Published: 2019-12-30T16:09:17.000Z Updated: 2025-10-21T23:35:54.315Z Open on db.gcve.eu Reference links https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf https://www.dlink.com/en/security-bulletin https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146 https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14948`	not_vulnerable	2026-06-08 05:08:57.654237	Details available Certain D-Link products are affected by: Buffer Overflow. This affects DIR-880L 1.08B04 and DIR-895 L/R 1.13b03. The impact is: execute arbitrary code (remote). The component is: htdocs/fileaccess.cgi. The attack vector is: A crafted HTTP request handled by fileacces.cgi could allow an attacker to mount a ROP attack: if the HTTP header field CONTENT_TYPE starts with ''boundary=' followed by more than 256 characters, a buffer overflow would be triggered, potentially causing code execution. Published: 2019-10-14T17:03:25.000Z Updated: 2024-08-05T19:42:22.242Z Open on db.gcve.eu Reference links https://github.com/badnack/d_link_880_bug/blob/master/README.md	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.