[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWjZSqJX_WvaRAW7zFudne19HbbZXAP0roFbDlyUmUHE":3,"g5a-ex:dlink\u002Fdir-815_firmware@*":114,"g5a-family:dlink\u002Fdir-815_firmware":116},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":91,"seoMetadata":92,"meta":111},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"dlink","dir-815_firmware",6,14,0,"2025-08-27",[14,18,20,22,24,26],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.1",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"1.01ssb08.bin",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"1.03",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"1.04",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"2.03.b02",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"2.07.b01","Dir-815 Firmware by Dlink is a technology product with 6 tracked versions and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},[37,45,50,57,61,67,71,75,80,86],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2023-51123","An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the service parameter in the soapcgi_main function of the cgibin binary component.","2024-01-10",9.8,"v3.1","Critical",0.24381,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":49},"CVE-2024-22651","There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.","2024-01-24",0.20188,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":42,"severity":55,"isKev":17,"epssScore":56},"CVE-2024-0717","A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853, DIR-878, DIR-882, DIR-1210, DIR-1260, DIR-2150, DIR-X1530, DIR-X1860, DSL-224, DSL-245GR, DSL-2640U, DSL-2750U, DSL-G2452GR, DVG-5402G, DVG-5402G, DVG-5402GFRU, DVG-N5402G, DVG-N5402G-IL, DWM-312W, DWM-321, DWR-921, DWR-953 and Good Line Router v2 up to 20240112. This vulnerability affects unknown code of the file \u002Fdevinfo of the component HTTP GET Request Handler. The manipulation of the argument area with the input notice|net|version leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-251542 is the identifier assigned to this vulnerability.","2024-01-19",5.3,"Medium",0.18195,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":60},"CVE-2018-25115","Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.",0.10133,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":41,"cvssVersion":65,"severity":43,"isKev":17,"epssScore":66},"CVE-2014-8888","The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an \"HTTP command injection issue.\"","2018-04-12","v3.0",0.05313,{"cveId":68,"description":69,"publishedDate":64,"cvssScore":41,"cvssVersion":65,"severity":43,"isKev":17,"epssScore":70},"CVE-2015-0150","The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors.",0.02057,{"cveId":72,"description":73,"publishedDate":64,"cvssScore":41,"cvssVersion":65,"severity":43,"isKev":17,"epssScore":74},"CVE-2015-0152","D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password.",0.02035,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":41,"cvssVersion":65,"severity":43,"isKev":17,"epssScore":79},"CVE-2018-10106","D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have permission bypass and information disclosure in \u002Fhtdocs\u002Fweb\u002Fgetcfg.php, as demonstrated by a \u002Fgetcfg.php?a=%0a_POST_SERVICES%3DDEVICE.ACCOUNT%0aAUTHORIZED_GROUP%3D1 request.","2018-04-16",0.01899,{"cveId":81,"description":82,"publishedDate":64,"cvssScore":83,"cvssVersion":65,"severity":84,"isKev":17,"epssScore":85},"CVE-2015-0153","D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.",7.5,"High",0.01898,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":83,"cvssVersion":42,"severity":84,"isKev":17,"epssScore":90},"CVE-2023-37758","D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component \u002Fweb\u002Fcaptcha.cgi.","2023-07-18",0.0142,[],{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Dir-815 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-815 Firmware by Dlink covering 6 versions with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-815 Firmware vulnerabilities, Dir-815 Firmware security, Dir-815 Firmware CVE, Dlink Dir-815 Firmware, Dir-815 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":97,"@type":98,"name":99,"description":94,"url":100,"manufacturer":101,"applicationCategory":105,"softwareVersion":106,"mainEntity":107},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-815 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-815_firmware",{"@type":102,"name":103,"url":104},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","6 versions tracked",{"@type":108,"name":109,"description":110,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-815 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-815 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":112,"apiVersion":113},"2026-10-17T20:37:29.397Z","3.0",{"rows":115,"total":11,"capped":17,"failed":11},[],[]]