What’s Vulnerable › Vulnerabilities

CVE-2018-7859

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-12-30 · updated 2026-06-17
• Weakness: CWE-79

Description

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit.

Affected products

• Dlink Dgs-1510-20 Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-28 Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-28P Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-28X Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-28Xmp Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-52 Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-52X Firmware: through 1.31.b003; 1.20.011, 1.30.007
• Dlink Dgs-1510-52Xmp Firmware: through 1.31.b003; 1.20.011, 1.30.007

References

• http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10082
• http://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10082

Get alerted when CVE-2018-7859 or the next vulnerability affects your stack