Dlink Dir-820l Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dlink Dir-820l Firmware: 5 record(s), with affected versions and fixes.
cpe:2.3:o:dlink:dir-820l_firmware

CVE-2025-52079 High · 8.8 CWE-284 Oct 21, 2025

Improper Access Control in Dlink Dir-820l Firmware

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /get_set.ccp.

CVE-2023-25280 Critical · 9.8 KEV High · 67 Public exploit CWE-78 Mar 15, 2023

D-Link DIR-820 Router OS Command Injection Vulnerability

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

CVE-2022-26258 Critical · 9.8 KEV High · 63 CWE-78 Mar 27, 2022

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

CVE-2021-45382 Critical · 9.8 KEV High · 67 Public exploit CWE-78 Feb 17, 2022

D-Link Multiple Routers Remote Code Execution Vulnerability

A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.

CVE-2015-1187 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-287 Sep 21, 2017

D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.