GCVE - cpe:2.3:h:dlink:dir-823:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-823:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 823 (`0b4dda0a-15c3-5ee5-97c8-aea7d5825ee0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-20213`	not_vulnerable	2026-06-08 05:13:30.586478	Details available D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. Published: 2020-01-02T01:03:16.000Z Updated: 2024-08-05T02:39:09.121Z Open on db.gcve.eu Reference links https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-en-faf1a9a13f3f https://medium.com/%40s1kr10s/d-link-dir-859-unauthenticated-information-disclosure-es-6540f7f55b03 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17621`	not_vulnerable	2026-06-08 05:13:10.855042	Details available The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. Published: 2019-12-30T16:09:17.000Z Updated: 2025-10-21T23:35:54.315Z Open on db.gcve.eu Reference links https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf https://www.dlink.com/en/security-bulletin https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10146 https://medium.com/%40s1kr10s/d-link-dir-859-rce-unautenticated-cve-2019-17621-en-d94b47a15104	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6563`	not_vulnerable	2026-06-08 05:08:02.782392	D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L. Published: 2018-07-13T20:00:00.000Z Updated: 2024-08-06T01:36:28.095Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/40805/ https://www.kb.cert.org/vuls/id/677427 http://www.securityfocus.com/bid/94130 http://seclists.org/fulldisclosure/2016/Nov/38	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.