GCVE - cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-868l:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 868L (`c86008e3-fe56-5bdd-8873-c47cf4df78c2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-3485`	not_vulnerable	2026-06-08 08:01:18.844487	D-Link DIR-868L SSDP Service sub_1BF84 os command injection CRITICAL (9.8) A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2026-03-03T21:02:10.454Z Updated: 2026-03-03T21:32:41.532Z Open on db.gcve.eu Reference links https://vuldb.com/?id.348560 https://vuldb.com/?ctiid.348560 https://vuldb.com/?submit.764759 https://kn0sinna.notion.site/dlink-dir-868l-ssdp-command-injection-30eb1876cd6e80caa691de6fe5cab59c https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-29321`	not_vulnerable	2026-06-08 05:24:58.104950	Details available The D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data. Published: 2021-06-04T19:40:19.000Z Updated: 2024-08-04T16:48:01.785Z Open on db.gcve.eu Reference links https://cybersecurityworks.com/zerodays/cve-2020-29321-telnet-hardcoded-credentials.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20213`	not_vulnerable	2026-06-08 05:13:30.588775	Details available D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. Published: 2020-01-02T01:03:16.000Z Updated: 2024-08-05T02:39:09.121Z Open on db.gcve.eu Reference links https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17621`	not_vulnerable	2026-06-08 05:13:10.857316	Details available The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. Published: 2019-12-30T16:09:17.000Z Updated: 2025-10-21T23:35:54.315Z Open on db.gcve.eu Reference links https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf https://www.dlink.com/en/security-bulletin https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146 https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-9284`	not_vulnerable	2026-06-08 05:12:08.001963	Details available authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code. Published: 2018-04-04T19:00:00.000Z Updated: 2024-09-16T22:50:30.779Z Open on db.gcve.eu Reference links https://www.fortinet.com/blog/threat-research/fortiguard-labs-discovers-vulnerability-in--d-link-router-dir868.html http://www.dlink.com.sg/dir-868l/#firmware	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6530`	not_vulnerable	2026-06-08 05:11:53.926296	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6529`	not_vulnerable	2026-06-08 05:11:53.925395	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6528`	not_vulnerable	2026-06-08 05:11:53.924886	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-6527`	not_vulnerable	2026-06-08 05:11:53.924195	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19988`	not_vulnerable	2026-06-08 05:11:16.528261	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19987`	not_vulnerable	2026-06-08 05:11:16.524776	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10957`	not_vulnerable	2026-06-08 05:10:37.549375	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14948`	not_vulnerable	2026-06-08 05:08:57.648215	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6563`	not_vulnerable	2026-06-08 05:08:02.789870	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.