Skip to main content

Vendor/product archive

dlink / dap-1860 CVEs

Beta · best-effort

6 CVEs tagged to dlink / dap-18600 Critical, 6 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2023-45208

Published Oct 10, 2023

A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers (within range of the repea…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2020-27864

Published Feb 12, 2021

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication…

CVSS 8.8 · High
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2020-15631

Published Jul 23, 2020

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 1.04B03_HOTFIX WiFi extenders. Although authentication…

CVSS 8.0 · High
Vendor/product tagsBeta · best-effort

CVE-2019-19598

Published Dec 5, 2019

D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP requests, part of the…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2019-19597

Published Dec 5, 2019

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.

CVSS 8.8 · High
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort
Showing 1-6 of 6 CVEsPage 1 of 1