DF
Product
Dir-600 Firmware
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 2Medium 0Low 0
Watch
Add Dir-600 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-15194 | 9.8 | Dec 29 | D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow Affected: 2.15ww |
| CVE-2018-25115 | 9.8 | Aug 27 | D-Link DIR-110/412/600/615/645/815 RCE via service.cgi Affected: All versions, or not specified |
| CVE-2013-10069 | 9.8 | Aug 5 | D-Link Devices Unauthenticated RCE Affected: through 2.14b01 |
| CVE-2013-10048 | 9.8 | Aug 1 | D-Link Devices command.php Unauthenticated RCE Affected: through 2.14b01 |
| CVE-2024-7357 | 9.8 | Aug 1 | D-Link DIR-600 soap.cgi soapcgi_main os command injection Affected: through 2.18 |
| CVE-2023-33626 | 9.8 | Jun 12 | D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary Affected: 2.18 |
| CVE-2023-33625 | 9.8 | Jun 12 | D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function Affected: 2.18 |
| CVE-2013-7471 | 9.8 | Jun 11 | An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev Affected: before 2.17b01 |
Showing 8