D-Link DIR-X1860 vulnerabilities
3 known CVE vulnerabilities in D-Link DIR-X1860, translated and rated.
- CVE-2021-41445Medium
A reflected cross-site scripting (XSS) vulnerability exists in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta. A remote unauthenticated attacker can execute code on the victim's device by sending a crafted URL to the victim.
- CVE-2021-41442High
An HTTP smuggling vulnerability in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to perform a DoS attack by sending a specially crafted HTTP packet.
- CVE-2021-41441High
A DoS vulnerability in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router by sending a specially crafted URL to an authenticated victim. The victim must visit this URL for the router to reboot.