Known vulnerabilities in DIR-878
Vendor:
D-Link
Software:
DIR-878
Software CPE:
cpe:2.3:h:d-link:dir-878:*:*:*:*:*:*:*:*
Website:
https://www.dlink.com/
Total vulnerabilities:
7
Public exploits:
4
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU118583 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-60676 |
CWE-78 | High | - | 18.11.2025 |
SB2025111845 |
||
| #VU118582 - Stack-based buffer overflow CVE-2025-60674 |
CWE-121 | Low | - | 18.11.2025 |
SB2025111845 |
||
| #VU118580 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-60673 |
CWE-78 | High | - | 18.11.2025 |
SB2025111845 |
||
| #VU118579 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-60672 |
CWE-78 | High | - | 18.11.2025 |
SB2025111845 |
||
| #VU67536 - Stack-based buffer overflow CVE-2022-41140 |
CWE-121 | High | 1.30b08_Beta_Hotfix | 21.09.2022 |
SB2022092126 |
||
| #VU25573 - Incorrect Comparison CVE-2020-8864 |
CWE-697 | Low | v1.30b10Beta | 25.02.2020 |
SB2020022506 |
||
| #VU25572 - Incorrect Implementation of Authentication Algorithm CVE-2020-8863 |
CWE-303 | Low | v1.30b10Beta | 25.02.2020 |
SB2020022506 |