Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-818lw:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorDlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44)
ProductDir 818Lw (d318dfdd-d06d-5fc1-aa92-fa50473eb156)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9003 not_vulnerable 2026-06-08 07:45:21.569443 D-Link DIR-818LW DHCP Reserved Address bsc_lan.php cross site scripting
LOW (3.5)
A vulnerability has been found in D-Link DIR-818LW 1.04. This vulnerability affects unknown code of the file /bsc_lan.php of the component DHCP Reserved Address Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-08-15T02:32:05.762Z
Updated: 2025-08-18T18:36:33.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7553 not_vulnerable 2026-06-08 07:45:17.657956 D-Link DIR-818LW System Time Page os command injection
MEDIUM (4.7)
A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2025-07-13T23:44:05.634Z
Updated: 2025-07-14T14:13:31.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13482 not_vulnerable 2026-06-08 05:12:42.300413 Details available
An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings.
Published: 2019-07-10T19:53:39.000Z
Updated: 2024-08-04T23:57:39.073Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13481 not_vulnerable 2026-06-08 05:12:42.299999 Details available
An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings.
Published: 2019-07-10T19:53:29.000Z
Updated: 2024-08-04T23:57:39.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12787 not_vulnerable 2026-06-08 05:12:40.487931 Details available
An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.
Published: 2019-06-10T17:49:38.000Z
Updated: 2024-08-04T23:32:55.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12786 not_vulnerable 2026-06-08 05:12:40.487469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20114 not_vulnerable 2026-06-08 05:11:26.675586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19987 not_vulnerable 2026-06-08 05:11:16.520561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19986 not_vulnerable 2026-06-08 05:11:16.518423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.