dlink dir-878 firmware

Name: dlink dir-878 firmware
Brand: dlink

productUS

cpe:2.3:o:dlink:dir-878_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

10critical14high1medium0low

updated 2026-10-27

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-8864US	high8.8	81.7% (100th)	—	no fix	2020-03-23	≤ 1.20b03
CVE-2020-8863US	high8.8	78.4% (100th)	—	no fix	2020-03-23	≤ 1.20b03
CVE-2024-0717US	medium5.3	18.2% (97th)	—	no fix	2024-01-19	≤ 2024-01-12
CVE-2024-48634US	—	17.6% (97th)	—	no fix	2024-10-17	= 1.30b08
CVE-2019-8319US	high8.8	7.80% (95th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8312US	high8.8	6.96% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8316US	high8.8	6.58% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8318US	high8.8	6.41% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8315US	high8.8	6.41% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8314US	high8.8	6.41% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8313US	high8.8	6.41% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2019-8317US	high8.8	6.35% (94th)	—	no fix	2019-02-13	= 1.12a1
CVE-2021-44882US	critical9.8	4.51% (91st)	—	no fix	2022-02-04	2 versions
CVE-2021-44880US	critical9.8	3.97% (90th)	—	no fix	2022-02-04	2 versions
CVE-2025-60672US	—	3.63% (89th)	—	no fix	2025-11-13	= 1.01b04
CVE-2025-60673US	—	3.53% (89th)	—	no fix	2025-11-13	= 1.01b04
CVE-2025-60676US	—	3.49% (89th)	—	no fix	2025-11-13	= 1.01b04
CVE-2022-1262US	high7.8	2.21% (83rd)	—	no fix	2022-04-11	2 versions
CVE-2024-48638US	—	2.15% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48637US	—	2.15% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48636US	—	2.15% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48635US	—	2.15% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48629US	—	2.15% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48631US	—	2.14% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48630US	—	2.12% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48633US	—	2.11% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2024-48632US	—	2.11% (82nd)	—	no fix	2024-10-17	= 1.30b08
CVE-2022-43184US	critical9.8	1.85% (79th)	—	no fix	2022-10-19	= 1.30b08
CVE-2022-26670US	high8.8	1.55% (75th)	—	no fix	2022-04-07	≤ 1.20b05
CVE-2021-30072US	critical9.8	1.49% (74th)	—	no fix	2021-04-02	≤ 1.30b08
CVE-2025-0481US	high7.5	1.43% (73rd)	—	no fix	2025-01-15	= 1.03
CVE-2023-27720US	critical9.8	1.35% (71st)	—	no fix	2023-04-09	= 1.30b08
CVE-2023-24800US	critical9.8	1.30% (70th)	—	no fix	2023-04-07	= 1.20b05
CVE-2022-44202US	critical9.8	1.25% (69th)	—	no fix	2022-11-22	2 versions
CVE-2022-44801US	critical9.8	1.19% (68th)	—	no fix	2022-11-22	= 1.02b05
CVE-2023-24799US	critical9.8	1.11% (66th)	—	no fix	2023-04-07	= 1.20b05
CVE-2023-24798US	critical9.8	1.11% (66th)	—	no fix	2023-04-07	= 1.20b05
CVE-2022-41140US	high8.8	1.08% (65th)	—	no fix	2023-01-26	≤ 1.30b06
CVE-2025-60674US	—	0.58% (47th)	—	no fix	2025-11-13	= 1.01b04

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')23 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')14 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan