https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-0615.htmlhttps://patchthecve.com/cve/CVE-2004-0615.htmlTue, 16 Jun 2026 22:05:59 +0000MEDIUM 5.1: Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.https://patchthecve.com/cve/CVE-2004-0661.htmlhttps://patchthecve.com/cve/CVE-2004-0661.htmlTue, 16 Jun 2026 22:06:06 +0000MEDIUM 5.0: Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.https://patchthecve.com/cve/CVE-2003-1264.htmlhttps://patchthecve.com/cve/CVE-2003-1264.htmlTue, 16 Jun 2026 22:03:49 +0000MEDIUM 5.0: TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication.