GCVE - cpe:2.3:h:dlink:dir-816l:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dlink:dir-816l:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 816L (`5b576c6b-7656-56f5-ae0f-0d94f8454607`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9727`	not_vulnerable	2026-06-08 07:47:09.651112	D-Link DIR-816L soap.cgi soapcgi_main os command injection MEDIUM (6.3) A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgi_main of the file /soap.cgi. This manipulation of the argument service causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-08-31T11:32:06.961Z Updated: 2025-10-23T16:24:37.931Z Open on db.gcve.eu Reference links https://vuldb.com/?id.322016 https://vuldb.com/?ctiid.322016 https://vuldb.com/?submit.639698 https://github.com/scanleale/IOT_sec/blob/main/DIR-816L.pdf https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-7836`	not_vulnerable	2026-06-08 07:45:18.300545	D-Link DIR-816L Environment Variable cgibin lxmldbc_system command injection MEDIUM (6.3) A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbc_system of the file /htdocs/cgibin of the component Environment Variable Handler. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-07-19T16:44:06.551Z Updated: 2025-07-21T15:57:08.788Z Open on db.gcve.eu Reference links https://vuldb.com/?id.316939 https://vuldb.com/?ctiid.316939 https://vuldb.com/?submit.617359 https://github.com/bananashipsBBQ/CVE/blob/main/D-Link%20DIR-816L%20Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi.md https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-46176`	not_vulnerable	2026-06-08 07:25:11.300287	Details available Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis. Published: 2025-05-23T00:00:00.000Z Updated: 2025-05-23T18:54:16.599Z Open on db.gcve.eu Reference links https://www.dlink.com/en/security-bulletin/ https://github.com/namberino/cve/tree/main/CVE-2025-46176	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13191`	not_vulnerable	2026-06-08 07:04:31.765125	D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow HIGH (8.8) A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-11-15T07:02:06.314Z Updated: 2025-11-17T15:00:24.513Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332480 https://vuldb.com/?ctiid.332480 https://vuldb.com/?submit.685543 https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(soap.cgi).pdf https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13190`	not_vulnerable	2026-06-08 07:04:31.764579	D-Link DIR-816L __ajax_exporer.sgi scandir_main stack-based overflow HIGH (8.8) A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. Published: 2025-11-15T06:32:06.207Z Updated: 2025-11-17T14:34:16.419Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332479 https://vuldb.com/?ctiid.332479 https://vuldb.com/?submit.685541 https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(scandir.sgi).pdf https://www.dlink.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13189`	not_vulnerable	2026-06-08 07:04:31.764097	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13188`	not_vulnerable	2026-06-08 07:04:31.763324	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28956`	not_vulnerable	2026-06-08 05:42:46.105811	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28955`	not_vulnerable	2026-06-08 05:42:46.105146	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5999`	not_vulnerable	2026-06-08 05:06:51.128851	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.