GCVE - cpe:2.3:h:dlink:dir-860l:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-860l:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 860L (`009aceaf-947d-5b43-9418-7643491bb60f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9026`	not_vulnerable	2026-06-08 07:45:21.609737	D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection HIGH (7.3) A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgi_main of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-08-15T09:32:06.504Z Updated: 2025-08-15T14:57:03.873Z Open on db.gcve.eu Reference links https://vuldb.com/?id.320091 https://vuldb.com/?ctiid.320091 https://vuldb.com/?submit.629946 https://github.com/i-Corner/cve/issues/17 https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-42812`	not_vulnerable	2026-06-08 06:45:47.041334	Details available In D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands. Published: 2024-08-19T00:00:00.000Z Updated: 2025-03-17T15:13:26.867Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://gist.github.com/XiaoCurry/574ed9c2b0d12cd0b45399116d82121c	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41611`	not_vulnerable	2026-06-08 06:43:54.748078	Details available In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands. Published: 2024-07-30T00:00:00.000Z Updated: 2024-08-02T04:46:52.551Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/Nop3z/CVE/blob/main/dlink/dir-820/Dlink-860L-hardcoded-vulnerability.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37605`	not_vulnerable	2026-06-08 06:39:47.969369	Details available A NULL pointer dereference in D-Link DIR-860L REVB_FIRMWARE_2.04.B04_ic5b allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. Published: 2024-12-17T00:00:00.000Z Updated: 2024-12-17T17:10:11.838Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://www.dlink.com/en https://docs.google.com/document/d/1cWlVLaVvr_xzkqbKIXY7EW89hNHE89SSlNtesv6lzl8/edit?usp=sharing https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10397	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6530`	not_vulnerable	2026-06-08 05:11:53.926035	Details available OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter. Published: 2018-03-06T20:00:00.000Z Updated: 2025-10-21T23:45:55.871Z Open on db.gcve.eu Reference links ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-868L/REVA/DIR-868L_REVA_FIRMWARE_PATCH_NOTES_1.20B01_EN_WW.pdf ftp://FTP2.DLINK.COM/SECURITY_ADVISEMENTS/DIR-860L/REVA/DIR-860L_REVA_FIRMWARE_PATCH_NOTES_1.11B01_EN_WW.pdf https://github.com/TheBeeMan/Pwning-multiple-dlink-router-via-SOAP-proto ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-865L/REVA/DIR-865L_REVA_FIRMWARE_PATCH_NOTES_1.10B01_EN_WW.pdf ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-880L/REVA/DIR-880L_REVA_FIRMWARE_PATCH_NOTES_1.08B06_EN_WW.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6529`	not_vulnerable	2026-06-08 05:11:53.925322	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6528`	not_vulnerable	2026-06-08 05:11:53.924720	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6527`	not_vulnerable	2026-06-08 05:11:53.920755	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-20114`	not_vulnerable	2026-06-08 05:11:26.676747	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19987`	not_vulnerable	2026-06-08 05:11:16.523596	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.