[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHYsuPjVKDA3zCSBS-djGs2N71GNS2mnaOGe2tEGHzVM":3,"g5a-family:dlink\u002Fdir-615_firmware":147,"g5a-ex:dlink\u002Fdir-615_firmware@*":148},{"success":4,"data":5},true,{"product":6,"versions":43,"topVulnerabilitiesByEpss":56,"kevVulnerabilities":114,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":42},"dlink","dir-615_firmware",12,14,2,"2025-08-27",[14,17,21,23,25,28,30,32,34,36,38,40],{"version":15,"cve_count":16,"kev_count":16,"has_kev":4},"10.01b02",1,{"version":18,"cve_count":16,"kev_count":19,"has_kev":20},"17.00",0,false,{"version":22,"cve_count":16,"kev_count":19,"has_kev":20},"20.05",{"version":24,"cve_count":16,"kev_count":19,"has_kev":20},"20.06",{"version":26,"cve_count":27,"kev_count":19,"has_kev":20},"20.07",4,{"version":29,"cve_count":19,"kev_count":19,"has_kev":20},"20.09",{"version":31,"cve_count":16,"kev_count":19,"has_kev":20},"20.10",{"version":33,"cve_count":19,"kev_count":19,"has_kev":20},"2.5.17",{"version":35,"cve_count":16,"kev_count":19,"has_kev":20},"3.03ww",{"version":37,"cve_count":19,"kev_count":19,"has_kev":20},"4.10",{"version":39,"cve_count":19,"kev_count":19,"has_kev":20},"4.13",{"version":41,"cve_count":19,"kev_count":19,"has_kev":20},"6.06b03","Dir-615 Firmware by Dlink is a technology product with 12 tracked versions and 14 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[44,45,46,47,48,49,50,51,52,53,54,55],{"version":15,"cve_count":16,"kev_count":16,"has_kev":4},{"version":18,"cve_count":16,"kev_count":19,"has_kev":20},{"version":22,"cve_count":16,"kev_count":19,"has_kev":20},{"version":24,"cve_count":16,"kev_count":19,"has_kev":20},{"version":26,"cve_count":27,"kev_count":19,"has_kev":20},{"version":29,"cve_count":19,"kev_count":19,"has_kev":20},{"version":31,"cve_count":16,"kev_count":19,"has_kev":20},{"version":33,"cve_count":19,"kev_count":19,"has_kev":20},{"version":35,"cve_count":16,"kev_count":19,"has_kev":20},{"version":37,"cve_count":19,"kev_count":19,"has_kev":20},{"version":39,"cve_count":19,"kev_count":19,"has_kev":20},{"version":41,"cve_count":19,"kev_count":19,"has_kev":20},[57,65,70,75,80,87,93,100,104,109],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":4,"epssScore":64},"CVE-2019-16920","Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a \"PingTest\" device common gateway interface that could lead to common injection. An attacker who successfully triggers the command injection could achieve full system compromise. Later, it was independently found that these are also affected: DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825.","2019-09-27",9.8,"v3.1","Critical",0.99996,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":4,"epssScore":69},"CVE-2014-8361","The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.","2015-05-01",0.99975,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":74},"CVE-2021-42627","The WAN configuration page \"wan.htm\" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which can lead to disclose the information about WAN settings and also leverage attacker to modify the data fields of page.","2022-08-23",0.6307,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":79},"CVE-2018-15839","D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.","2018-08-28",0.45347,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":62,"severity":85,"isKev":20,"epssScore":86},"CVE-2019-19742","On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.","2019-12-18",4.8,"Medium",0.19834,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":62,"severity":85,"isKev":20,"epssScore":92},"CVE-2024-0717","A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file \u002Fdevinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.","2024-01-19",5.3,0.18195,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":62,"severity":98,"isKev":20,"epssScore":99},"CVE-2013-10050","An OS command injection vulnerability exists in multiple D-Link routers—confirmed on DIR-300 rev A (v1.05) and DIR-615 rev D (v4.13)—via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in firmware versions that expose tools_vct.xgi and use the Mathopd\u002F1.5p6 web server. No vendor patch is available, and affected models are end-of-life.","2025-08-01",8.8,"High",0.13637,{"cveId":101,"description":102,"publishedDate":12,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":103},"CVE-2018-25115","Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.",0.10133,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":97,"cvssVersion":62,"severity":98,"isKev":20,"epssScore":108},"CVE-2019-17525","The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.","2020-04-21",0.0584,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":20,"epssScore":113},"CVE-2021-37388","A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution.","2021-08-06",0.0374,[115,120],{"cveId":66,"description":67,"publishedDate":68,"cvssScore":61,"severity":63,"isKev":4,"epssScore":69,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":119},"Realtek SDK Improper Input Validation Vulnerability","2023-09-18","Realtek SDK contains an improper input validation vulnerability in the miniigd SOAP service that allows remote attackers to execute malicious code via a crafted NewInternalClient request.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"severity":63,"isKev":4,"epssScore":64,"cisaVulnName":121,"cisaDateAdded":122,"cisaShortDescription":123,"cisaRequiredAction":124},"D-Link Multiple Routers Command Injection Vulnerability","2022-03-25","Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.","The impacted product is end-of-life and should be disconnected if still in use.",{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Dir-615 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-615 Firmware by Dlink covering 12 versions with 14 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-615 Firmware vulnerabilities, Dir-615 Firmware security, Dir-615 Firmware CVE, Dlink Dir-615 Firmware, Dir-615 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-615 Firmware KEV, Dir-615 Firmware exploited vulnerabilities",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-615 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-615_firmware",{"@type":135,"name":136,"url":137},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","12 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-615 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-615 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":146},"2026-10-17T20:32:04.479Z","3.0",[],{"rows":149,"total":11,"capped":20,"failed":19},[150,155],{"cveId":66,"name":116,"severity":63,"cvss":61,"added":117,"epss":69,"published":151,"ranges":152,"checked":4,"hits":154,"covers":20},"2015-05-01T15:59:01.287",[153,15],"up to 6.06b03",[],{"cveId":58,"name":121,"severity":63,"cvss":61,"added":122,"epss":64,"published":156,"ranges":157,"checked":4,"hits":158,"covers":20},"2019-09-27T12:15:10.017",[],[]]