[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwehksQoWjbrkQ4vEcWmXrLJK68ee-f6WZNzTtZfG-t8":3,"g5a-family:dlink\u002Fdir-865l_firmware":117,"g5a-ex:dlink\u002Fdir-865l_firmware@*":118},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":84,"seoMetadata":95,"meta":114},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"dlink","dir-865l_firmware",4,16,2,"2020-09-19",[14,18,21,24],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.07b01",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"1.08b01",1,{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},"1.20b01",6,{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"reva_firmware_patch_1.08.b01","Dir-865l Firmware by Dlink is a technology product with 4 tracked versions and 16 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},[33,41,46,53,59,64,70,73,76,80],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2018-6530","OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.","2018-03-06",9.8,"v3.1","Critical",0.96682,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":45},"CVE-2019-17621","The UPnP endpoint URL \u002Fgena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","2019-12-30",0.89624,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":38,"severity":51,"isKev":17,"epssScore":52},"CVE-2020-13782","D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection.","2020-06-03",8.8,"High",0.27057,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":38,"severity":51,"isKev":17,"epssScore":58},"CVE-2019-20213","D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.","2020-01-02",7.5,0.02181,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":63},"CVE-2013-4857","D-Link DIR-865L has PHP File Inclusion in the router xml file.","2019-10-25",0.01646,{"cveId":65,"description":66,"publishedDate":36,"cvssScore":67,"cvssVersion":38,"severity":68,"isKev":17,"epssScore":69},"CVE-2018-6528","XSS vulnerability in htdocs\u002Fwebinc\u002Fbody\u002Fbsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.",6.1,"Medium",0.01624,{"cveId":71,"description":72,"publishedDate":36,"cvssScore":67,"cvssVersion":38,"severity":68,"isKev":17,"epssScore":69},"CVE-2018-6529","XSS vulnerability in htdocs\u002Fwebinc\u002Fjs\u002Fbsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.",{"cveId":74,"description":75,"publishedDate":36,"cvssScore":67,"cvssVersion":38,"severity":68,"isKev":17,"epssScore":69},"CVE-2018-6527","XSS vulnerability in htdocs\u002Fwebinc\u002Fjs\u002Fadv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.",{"cveId":77,"description":78,"publishedDate":62,"cvssScore":50,"cvssVersion":38,"severity":51,"isKev":17,"epssScore":79},"CVE-2013-4855","D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share.",0.01521,{"cveId":81,"description":82,"publishedDate":49,"cvssScore":57,"cvssVersion":38,"severity":51,"isKev":17,"epssScore":83},"CVE-2020-13784","D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator.",0.01296,[85,90],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":37,"severity":39,"isKev":4,"epssScore":45,"cisaVulnName":86,"cisaDateAdded":87,"cisaShortDescription":88,"cisaRequiredAction":89},"D-Link DIR-859 Router Command Execution Vulnerability","2023-06-29","D-Link DIR-859 router contains a command execution vulnerability in the UPnP endpoint URL, \u002Fgena.cgi. Exploitation allows an unauthenticated remote attacker to execute system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":91,"cisaDateAdded":92,"cisaShortDescription":93,"cisaRequiredAction":94},"D-Link Multiple Routers OS Command Injection Vulnerability","2022-09-08","Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.","The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.",{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Dir-865l Firmware by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-865l Firmware by Dlink covering 4 versions with 16 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-865l Firmware vulnerabilities, Dir-865l Firmware security, Dir-865l Firmware CVE, Dlink Dir-865l Firmware, Dir-865l Firmware threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-865l Firmware KEV, Dir-865l Firmware exploited vulnerabilities",{"@context":100,"@type":101,"name":102,"description":97,"url":103,"manufacturer":104,"applicationCategory":108,"softwareVersion":109,"mainEntity":110},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-865l Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-865l_firmware",{"@type":105,"name":106,"url":107},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","4 versions tracked",{"@type":111,"name":112,"description":113,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-865l Firmware Security Vulnerabilities","Security vulnerabilities affecting Dir-865l Firmware by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":115,"apiVersion":116},"2026-10-18T15:49:51.647Z","3.0",[],{"rows":119,"total":11,"capped":17,"failed":16},[120,125],{"cveId":42,"name":86,"severity":39,"cvss":37,"added":87,"epss":45,"published":121,"ranges":122,"checked":4,"hits":124,"covers":17},"2019-12-30T17:15:19.857",[123],"up to 1.07b01",[],{"cveId":34,"name":91,"severity":39,"cvss":37,"added":92,"epss":40,"published":126,"ranges":127,"checked":4,"hits":129,"covers":17},"2018-03-06T20:29:00.987",[128],"up to reva_firmware_patch_1.08.b01",[]]