dir-866l firmware vulnerabilities and fixes

Recent CVEs affecting dir-866l firmware, with upgrade or downgrade steps. 2 tracked.

Also searched as: dir 866l firmware, dir-866lfirmware.

dir-866l firmware has 2 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 1. Most recent: 2019-10-16. Highest priority: CVE-2019-16920 (score 97/100).

• CVE-2019-17663 MEDIUM 6.1 MITIGATE D-Link DIR-866L 1.03B04 devices allow XSS via HtmlResponseMessage in the device common gateway interface, lead
• CVE-2019-16920 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE D-Link Multiple Routers Command Injection Vulnerability

FAQ

How do I fix dir-866l firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dir-866l firmware being exploited right now?

Yes: 1 dir-866l firmware CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which dir-866l firmware CVE should I patch first?

CVE-2019-16920 currently ranks highest (97/100): D-Link Multiple Routers Command Injection Vulnerability.

← Back to latest CVEs