Dir-823g firmware

This hub aggregates every CVE we track for Dir-823g firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Dir-823g firmware.

• CVE-2026-15270D-link DIR-823G Web boa.conf least privilege violation7.5Jul 9, 2026
• CVE-2026-11492D-Link DIR-823G vsftpd vsftpd.conf least privilege violation4.3Jun 8, 2026
• CVE-2026-4193D-Link DIR-823G goahead UpdateClientInfo access control7.3Mar 15, 2026
• CVE-2025-60675A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /tmp/new_qos.rule configura...5.4Nov 13, 2025
• CVE-2025-60671A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_rein...5.4Nov 13, 2025
• CVE-2025-60331D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCU_SHELL endpoint. This vulnerability allows attackers to cause a Denial of Servi...7.5Oct 22, 2025
• CVE-2025-60332A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.7.5Oct 22, 2025
• CVE-2025-2360D-Link DIR-823G UPnP Service HNAP1 SetUpnpSettings improper authorization7.3Mar 17, 2025
• CVE-2025-2359D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization7.3Mar 17, 2025
• CVE-2024-13030D-Link DIR-823G Web Management Interface HNAP1 SetVirtualServerSettings access control7.3Dec 30, 2024
• CVE-2024-51023D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. This vulnerability allows attackers to e...8.8Nov 5, 2024
• CVE-2024-51024D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitr...8.0Nov 5, 2024
• CVE-2024-44408D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext use...7.5Sep 6, 2024
• CVE-2024-33345D-Link DIR-823G A1V1.0.2B05 was found to contain a Null-pointer dereference in the main function of upload_firmware.cgi, which allows remote attackers to cause a Denial of Service (DoS) via a craft...6.5Apr 29, 2024
• CVE-2024-27657D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input, and...8.8Feb 29, 2024