Threat database

Multiple D-Link routers have a command injection vulnerability (CVE-2019-16920) that allows attackers to execute arbitrary commands, potentially leading to full system compromise. This vulnerability has been exploited in the wild. No specific affected versions or patches are detailed in the provided data.

D-Link DIR-610 devices are vulnerable to remote code execution through the cmd parameter in command.php. This vulnerability allows attackers to execute arbitrary commands remotely on affected devices. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.

The D-Link DIR-645 Wired/Wireless Router contains a remote code execution vulnerability via the HNAP interface's GetDeviceSettings action. This flaw allows remote attackers to execute arbitrary commands on the affected device. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.

D-Link DIR-825 R1 devices have a buffer overflow vulnerability in their web interface that can be exploited remotely to execute arbitrary code. This vulnerability is known to be exploited in the wild and is considered high severity. No specific affected versions or patches are detailed in the provided information.