[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxJqYzHxdRSxBVxVhrJmDtAd6JRF-6y5og_84-qTz0So":3,"g5a-family:dlink\u002Fdir-859_firmware":114,"g5a-ex:dlink\u002Fdir-859_firmware@*":115},{"success":4,"data":5},true,{"product":6,"versions":29,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":81,"seoMetadata":92,"meta":111},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":28},"dlink","dir-859_firmware",5,8,2,"2024-01-21",[14,18,21,24,26],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.03.b04",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"1.05",4,{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},"1.05b03",1,{"version":25,"cve_count":23,"kev_count":23,"has_kev":4},"1.06",{"version":27,"cve_count":9,"kev_count":23,"has_kev":4},"1.06b01","Dir-859 Firmware by Dlink is a technology product with 5 tracked versions and 8 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[30,31,32,33,34],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},{"version":25,"cve_count":23,"kev_count":23,"has_kev":4},{"version":27,"cve_count":9,"kev_count":23,"has_kev":4},[36,44,50,55,61,65,69,76],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":4,"epssScore":43},"CVE-2019-17621","The UPnP endpoint URL \u002Fgena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","2019-12-30",9.8,"v3.1","Critical",0.89624,{"cveId":45,"description":46,"publishedDate":12,"cvssScore":47,"cvssVersion":41,"severity":48,"isKev":4,"epssScore":49},"CVE-2024-0769","** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file \u002Fhedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ..\u002F..\u002F..\u002F..\u002Fhtdocs\u002Fwebinc\u002Fgetcfg\u002FDHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.",5.3,"Medium",0.82714,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":54},"CVE-2019-20215","D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in ssdpcgi() in \u002Fhtdocs\u002Fcgibin, because HTTP_ST is mishandled. The value of the urn: service\u002Fdevice is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters.","2020-01-29",0.75105,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":41,"severity":48,"isKev":17,"epssScore":60},"CVE-2022-25106","D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.","2022-03-04",5.5,0.08588,{"cveId":62,"description":63,"publishedDate":53,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":64},"CVE-2019-20216","D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in \u002Fhtdocs\u002Fcgibin, because REMOTE_PORT is mishandled. The value of the urn: service\u002Fdevice is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters.",0.03673,{"cveId":66,"description":67,"publishedDate":53,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":68},"CVE-2019-20217","D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via the urn: to the M-SEARCH method in ssdpcgi() in \u002Fhtdocs\u002Fcgibin, because SERVER_ID is mishandled. The value of the urn: service\u002Fdevice is checked with the strstr function, which allows an attacker to concatenate arbitrary commands separated by shell metacharacters.",0.03558,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":41,"severity":74,"isKev":17,"epssScore":75},"CVE-2019-20213","D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.","2020-01-02",7.5,"High",0.02181,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":80},"CVE-2023-36092","Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.","2023-07-31",0.01654,[82,87],{"cveId":45,"description":46,"publishedDate":12,"cvssScore":47,"severity":48,"isKev":4,"epssScore":49,"cisaVulnName":83,"cisaDateAdded":84,"cisaShortDescription":85,"cisaRequiredAction":86},"D-Link DIR-859 Router Path Traversal Vulnerability","2025-06-25","D-Link DIR-859 routers contain a path traversal vulnerability in the file \u002Fhedwig.cgi of the component HTTP POST Request Handler. Manipulation of the argument service with the input ..\u002F..\u002F..\u002F..\u002Fhtdocs\u002Fwebinc\u002Fgetcfg\u002FDHCPS6.BRIDGE-1.xml allows for the leakage of session data potentially enabling privilege escalation and unauthorized control of the device. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"severity":42,"isKev":4,"epssScore":43,"cisaVulnName":88,"cisaDateAdded":89,"cisaShortDescription":90,"cisaRequiredAction":91},"D-Link DIR-859 Router Command Execution Vulnerability","2023-06-29","D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, \u002Fgena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"title":93,"metaDescription":94,"keywords":95,"structuredData":96},"Dir-859 Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-859 Firmware by Dlink covering 5 versions with 8 tracked vulnerabilities including 1 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-859 Firmware vulnerabilities, Dir-859 Firmware security, Dir-859 Firmware CVE, Dlink Dir-859 Firmware, Dir-859 Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-859 Firmware KEV, Dir-859 Firmware exploited vulnerabilities",{"@context":97,"@type":98,"name":99,"description":94,"url":100,"manufacturer":101,"applicationCategory":105,"softwareVersion":106,"mainEntity":107},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-859 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-859_firmware",{"@type":102,"name":103,"url":104},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","5 versions tracked",{"@type":108,"name":109,"description":110,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-859 Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-859 Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":112,"apiVersion":113},"2026-10-17T21:25:46.194Z","3.0",[],{"rows":116,"total":11,"capped":17,"failed":16},[117,122],{"cveId":45,"name":83,"severity":48,"cvss":47,"added":84,"epss":49,"published":118,"ranges":119,"checked":4,"hits":121,"covers":17},"2024-01-21T08:15:07.55",[120],"1.06-beta1",[],{"cveId":37,"name":88,"severity":42,"cvss":40,"added":89,"epss":43,"published":123,"ranges":124,"checked":4,"hits":127,"covers":17},"2019-12-30T17:15:19.857",[125,126],"up to 1.05b03","1.06b01-beta1",[]]