D-Link: vulnerabilidades explotadas
- 26vulnerabilidades explotadas
- 2usado por ransomware
- 24 abr 2026la última añadida
- Multiple Routers 3
- DCS-2530L and DCS-2670L Devices 2
- DIR-859 Router 2
- Multiple NAS Devices 2
- DIR-823X 1
- Routers 1
- DNR-322L 1
- DIR-820 Router 1
- DIR-605 Router 1
- DIR-600 Router 1
- DSL-2750B Devices 1
- DWL-2600AP Access Point 1
- DIR-820L 1
- DIR-300 Router 1
- DNS-320 Storage Device 1
- DIR-610 Devices 1
- DCS-930L Devices 1
- DSL-2760U 1
- DIR-645 Router 1
- DIR-825 R1 Devices 1
- DNS-320 Device 1
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 24 abr 2026 | Command Injection | DIR-823X | Alto 7,2 | 88% |
| 8 dic 2025 | Buffer Overflow | Routers | Crítica 9,8 | 56% |
| 5 ago 2025 | Download of Code Without Integrity Check | DNR-322L | Alto 8,8 | 34% |
| 5 ago 2025 | DCS-2530L and DCS-2670L Command Injection | DCS-2530L and DCS-2670L Devices | Alto 8,8 | 54% |
| 5 ago 2025 | Unspecified | DCS-2530L and DCS-2670L Devices | Alto 7,5 | 98% |
| 25 jun 2025 | D-Link DIR-859 Router Path Traversal | DIR-859 Router | Media 5,3 | 83% |
| 30 sept 2024 | OS Command Injection | DIR-820 Router | Crítica 9,8 | 98% |
| 16 may 2024 | Information Disclosure | DIR-605 Router | Alto 7,5 | 87% |
| 16 may 2024 | Cross-Site Request Forgery (CSRF) | DIR-600 Router | Alto 8,0 | 43% |
| 11 abr 2024 | Command Injection | Multiple NAS Devices | Alto 7,3 | >99,9% |
| 11 abr 2024 | Use of Hard-Coded Credentials | Multiple NAS Devices | Crítica 9,8 | 98% |
| 8 ene 2024 | Command Injection | DSL-2750B Devices | Crítica 9,8 | 66% |
| 29 jun 2023 | Command Injection | DWL-2600AP Access Point | Alto 7,8 | 97% |
| 29 jun 2023 | Command Execution | DIR-859 Router | Crítica 9,8 | 91% |
| 8 sept 2022 | Remote Code Execution | DIR-820L | Crítica 9,8 | 92% |
| 8 sept 2022 | OS Command Injection | Multiple Routers | Crítica 9,8 | 97% |
| 8 sept 2022 | Cleartext Storage of a Password | DIR-300 Router | Media 5,7 | 3,1% |
| 15 abr 2022 | DNS-320 Remote Code Execution | DNS-320 Storage Device | Crítica 9,8 | 86% |
| 4 abr 2022 | Remote Code Execution | Multiple Routers | Crítica 9,8 | 98% |
| 25 mar 2022 | Remote Command Execution | DIR-610 Devices | Alto 8,8 | 22% |
| 25 mar 2022 | Command Injection | Multiple Routers | Crítica 9,8 | >99,9% |
| 25 mar 2022 | OS Command Injection | DCS-930L Devices | Alto 7,2 | 70% |
| 25 mar 2022 | Gateway Cross-Site Scripting | DSL-2760U | Media 5,4 | 51% |
| 10 feb 2022 | Remote Code Execution | DIR-645 Router | Alto 8,8 | 97% |
| 3 nov 2021 | Buffer Overflow | DIR-825 R1 Devices | Crítica 9,8 | 56% |
| 3 nov 2021 | Command Injection | DNS-320 Device | Crítica 9,8 | >99,9% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.