GCVE - cpe:2.3:h:dlink:dsl-2730u:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dsl-2730u:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dsl 2730U (`db51d53a-4a89-5f25-b299-7767ce28b24b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-46033`	not_vulnerable	2026-06-08 06:12:43.723996	Details available D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control. Published: 2023-10-19T00:00:00.000Z Updated: 2024-09-12T18:20:33.332Z Open on db.gcve.eu Reference links https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357 https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46033`	vulnerable	2026-06-08 06:12:43.722705	Details available D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control. Published: 2023-10-19T00:00:00.000Z Updated: 2024-09-12T18:20:33.332Z Open on db.gcve.eu Reference links https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357 https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13960`	not_vulnerable	2026-06-08 05:18:01.637085	Details available D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolver search path by default, which allows remote attackers to provide valid DNS responses (and also offer Internet services such as HTTP) for names that otherwise would have had an NXDOMAIN error, by registering a subdomain of the domain.name domain name. Published: 2020-06-08T19:26:41.000Z Updated: 2024-08-04T12:32:14.443Z Open on db.gcve.eu Reference links https://harigovind.org/articles/who-is-hijacking-my-nxdomains/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6411`	not_vulnerable	2026-06-08 05:09:51.227002	Details available Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password. Published: 2017-03-06T06:11:00.000Z Updated: 2024-08-05T15:25:49.260Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/41478/ http://www.securityfocus.com/bid/96560	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5966`	vulnerable	2026-06-08 05:02:58.855977	Details available The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command. Published: 2012-12-13T11:00:00.000Z Updated: 2024-09-16T18:59:28.740Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/876780	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.