D-Link Corp. DIR-815

Name: D-Link Corp. DIR-815
Brand: D-Link Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

5critical1high2medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-51123US	critical9.8	24.4% (98th)	—	no fix	2024-01-10	≤ 1.01SSb08.bin
CVE-2024-22651US	critical9.8	20.2% (97th)	—	no fix	2024-01-24	≤ 1.04
CVE-2024-0717US	medium5.3	18.2% (97th)	—	no fix	2024-01-19	—
CVE-2018-25115US	critical9.8	10.4% (96th)	—	no fix	2025-08-27	≤ 1.03
CVE-2014-8888US	critical9.8	5.31% (93rd)	—	no fix	2018-04-12	≤ 2.03.B02
CVE-2018-10106US	critical9.8	1.90% (80th)	—	no fix	2018-04-16	≤ 2.07.b01
CVE-2023-37758US	high7.5	1.42% (73rd)	—	no fix	2023-07-18	≤ 1.0.1
CVE-2025-6328US	—	1.20% (68th)	—	no fix	2025-06-20	≤ 1.01
CVE-2018-10107US	medium6.1	1.11% (66th)	—	no fix	2018-04-16	≤ 2.07.b01

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.