Dir-818l\(w\) firmware

This hub aggregates every CVE we track for Dir-818l\(w\) firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Dir-818l\(w\) firmware.

• CVE-2025-9003D-Link DIR-818LW DHCP Reserved Address bsc_lan.php cross site scripting3.5Aug 15, 2025
• CVE-2025-7553D-Link DIR-818LW System Time Page os command injection4.7Jul 13, 2025
• CVE-2019-13482An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the Type field to ...8.8Jul 10, 2019
• CVE-2019-13481An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with Authentication) via shell metacharacters in the MTU field to S...8.8Jul 10, 2019
• CVE-2019-12787An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.8.8Jun 10, 2019
• CVE-2019-12786An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the IPAddress key.8.8Jun 10, 2019
• CVE-2018-19987D-Link DIR-822 Rev.B 202KRb06, DIR-822 Rev.C 3.10B06, DIR-860L Rev.B 2.03.B03, DIR-868L Rev.B 2.05B02, DIR-880L Rev.A 1.20B01_01_i3se_BETA, and DIR-890L Rev.A 1.21B02_BETA devices mishandle IsAcces...9.8May 13, 2019
• CVE-2018-19986In the /HNAP1/SetRouterSettings message, the RemotePort parameter is vulnerable, and the vulnerability affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-822 B1 202KRb06 devices. In the SetRouterSetti...9.8May 13, 2019
• CVE-2018-20114On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in t...9.8Jan 2, 2019
• CVE-2016-6563D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action9.8Jul 13, 2018
• CVE-2016-5681Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR-822 C1 3.01 before 3.01WWb02, DIR-823 A1 1.00 before 1.0...9.8Aug 25, 2016