[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8YdGpY7oX0bJ7zjEkSMS5j5IWMsA2-UEgzXNYiFoLU8":3,"g5a-ex:dlink\u002Fdir-818lw@*":90,"g5a-family:dlink\u002Fdir-818lw":92},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":67,"seoMetadata":68,"meta":87},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"dlink","dir-818lw",0,9,"2025-08-15",[],"Dir-818lw by Dlink is a technology product and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,29,37,41,46,53,58,61],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2018-19986","In the \u002FHNAP1\u002FSetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSettings.php source code, the RemotePort parameter is saved in the $path_inf_wan1.\"\u002Fweb\" internal configuration memory without any regex checking. And in the IPTWAN_build_command function of the iptwan.php source code, the data in $path_inf_wan1.\"\u002Fweb\" is used with the iptables command without any regex checking. A vulnerable \u002FHNAP1\u002FSetRouterSettings XML message could have shell metacharacters in the RemotePort element such as the `telnetd` string.","2019-05-13",9.8,"v3.0","Critical",false,0.41606,{"cveId":26,"description":27,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":28},"CVE-2018-19987","D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAccessPoint in \u002FHNAP1\u002FSetAccessPointMode. In the SetAccessPointMode.php source code, the IsAccessPoint parameter is saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. A vulnerable \u002FHNAP1\u002FSetAccessPointMode XML message could have shell metacharacters in the IsAccessPoint element such as the `telnetd` string.",0.12932,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":23,"epssScore":36},"CVE-2019-13481","An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to SetWanSettings.","2019-07-10",8.8,"v3.1","High",0.08185,{"cveId":38,"description":39,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":23,"epssScore":40},"CVE-2019-13482","An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to SetWanSettings.",0.08056,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":20,"cvssVersion":34,"severity":22,"isKev":23,"epssScore":45},"CVE-2018-20114","On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an \"&&\" substring in the service parameter.  NOTE: this issue exists because of an incomplete fix for CVE-2018-6530.","2019-01-02",0.06725,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":34,"severity":51,"isKev":23,"epssScore":52},"CVE-2025-7553","A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.","2025-07-14",4.7,"Medium",0.03854,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":23,"epssScore":57},"CVE-2019-12787","An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.","2019-06-10",0.03566,{"cveId":59,"description":60,"publishedDate":56,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":23,"epssScore":57},"CVE-2019-12786","An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the IPAddress key.",{"cveId":62,"description":63,"publishedDate":11,"cvssScore":64,"cvssVersion":34,"severity":65,"isKev":23,"epssScore":66},"CVE-2025-9003","A vulnerability has been found in D-Link DIR-818LW 1.04. This vulnerability affects unknown code of the file \u002Fbsc_lan.php of the component DHCP Reserved Address Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.",3.5,"Low",0.00649,[],{"title":69,"metaDescription":70,"keywords":71,"structuredData":72},"Dir-818lw by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-818lw by Dlink with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-818lw vulnerabilities, Dir-818lw security, Dir-818lw CVE, Dlink Dir-818lw, Dir-818lw threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":73,"@type":74,"name":75,"description":70,"url":76,"manufacturer":77,"applicationCategory":81,"softwareVersion":82,"mainEntity":83},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-818lw","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-818lw",{"@type":78,"name":79,"url":80},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","Multiple versions",{"@type":84,"name":85,"description":86,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Dir-818lw Security Vulnerabilities","Security vulnerabilities affecting Dir-818lw by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":88,"apiVersion":89},"2026-10-17T21:22:26.821Z","3.0",{"rows":91,"total":9,"capped":23,"failed":9},[],[93],{"product":94,"cves":95},"dir-818lw_firmware",6]