dir-615 firmware vulnerabilities and fixes

Recent CVEs affecting dir-615 firmware, with upgrade or downgrade steps. 18 tracked.

Also searched as: dir 615 firmware, dir-615firmware.

dir-615 firmware has 18 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-08. Highest priority: CVE-2018-25115 (score 71/100).

• CVE-2021-42627 CRITICAL 9.8 MITIGATE MITIGATE The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly wi
• CVE-2026-2152 HIGH 7.2 MITIGATE A vulnerability was found in D-Link DIR-615 4.10
• CVE-2026-2151 HIGH 7.2 MITIGATE A vulnerability has been found in D-Link DIR-615 4.10
• CVE-2026-1506 HIGH 7.2 MITIGATE A vulnerability was determined in D-Link DIR-615 4.10
• CVE-2026-1505 HIGH 7.2 MITIGATE A vulnerability was found in D-Link DIR-615 4.10
• CVE-2026-1448 HIGH 7.2 UPGRADE A vulnerability was detected in D-Link DIR-615 up to 4.10
• CVE-2021-40654 MEDIUM 6.5 MITIGATE An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt
• CVE-2021-37388 CRITICAL 9.8 MITIGATE A buffer overflow in D-Link DIR-615 C2 3.03WW
• CVE-2019-17525 HIGH 8.8 MITIGATE The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mec
• CVE-2019-17353 HIGH 8.2 MITIGATE An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07
• CVE-2018-25115 CRITICAL 9.8 MITIGATE MITIGATE Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-81
• CVE-2018-15875 MEDIUM 6.1 MITIGATE Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript
• CVE-2018-15874 MEDIUM 6.1 MITIGATE Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScri
• CVE-2018-15839 CRITICAL 9.8 MITIGATE D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.
• CVE-2018-10431 HIGH 7.2 MITIGATE D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the Sy
• CVE-2017-9542 CRITICAL 9.8 MITIGATE D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi
• CVE-2017-7398 HIGH 8.8 MITIGATE D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability
• CVE-2013-10050 HIGH 8.8 UPGRADE UPGRADE An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and

FAQ

How do I fix dir-615 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dir-615 firmware being exploited right now?

None of the tracked dir-615 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dir-615 firmware CVE should I patch first?

CVE-2018-25115 currently ranks highest (71/100): Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-81.

RSS feed for dir-615 firmware · ← Back to latest CVEs