Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-816l_firmware:2.06.b09:beta:*:*:*:*:*:*

part: o version: 2.06.b09 update: beta

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 816L Firmware (dacda41f-224b-573b-af1f-1289aae95843)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13191 vulnerable 2026-06-08 07:04:31.764952 D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow
HIGH (8.8)
A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-11-15T07:02:06.314Z
Updated: 2025-11-17T15:00:24.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13190 vulnerable 2026-06-08 07:04:31.764554 D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow
HIGH (8.8)
A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-11-15T06:32:06.207Z
Updated: 2025-11-17T14:34:16.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13189 vulnerable 2026-06-08 07:04:31.763940 D-Link DIR-816L gena.cgi genacgi_main stack-based overflow
HIGH (8.8)
A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. This affects the function genacgi_main of the file gena.cgi. The manipulation of the argument SERVER_ID/HTTP_SID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-11-15T06:02:05.687Z
Updated: 2025-11-17T14:44:50.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13188 vulnerable 2026-06-08 07:04:31.762149 D-Link DIR-816L authentication.cgi authenticationcgi_main stack-based overflow
CRITICAL (9.8)
A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta. Affected by this vulnerability is the function authenticationcgi_main of the file /authentication.cgi. Performing manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-11-14T22:32:06.220Z
Updated: 2025-11-17T20:43:05.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25786 vulnerable 2026-06-08 05:23:49.428925 Details available
webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header
Published: 2020-09-19T19:24:09.000Z
Updated: 2024-08-04T15:40:36.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15895 vulnerable 2026-06-08 05:19:27.108149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15894 vulnerable 2026-06-08 05:19:27.107640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15893 vulnerable 2026-06-08 05:19:27.106465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.