[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGV5PfuefoHhT7mxRwNQLh427cOgg2vH6aj7ffEACaE0":3,"g5a-family:dlink\u002Fdir-600":95,"g5a-ex:dlink\u002Fdir-600@*":102},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":67,"seoMetadata":73,"meta":92},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"dlink","dir-600",3,7,1,"2025-08-27",[14,18,20],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"b",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"b2",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"b5",2,"Dir-600 by Dlink is a technology product with 3 tracked versions and 7 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},[29,37,44,49,54,59,63],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":4,"epssScore":36},"CVE-2014-100005","Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.","2015-01-13",8.8,"v3.1","High",0.43456,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":43},"CVE-2023-33625","D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.","2023-06-12",9.8,"Critical",0.33154,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":48},"CVE-2013-7471","An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort element of a SOAP POST request.","2019-06-11",0.23983,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":53},"CVE-2013-10048","An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker can execute arbitrary shell commands with root privileges, allowing full takeover of the device. This includes launching services such as Telnet, exfiltrating credentials, modifying system configuration, and disrupting availability. The flaw stems from the lack of authentication and inadequate sanitation of the cmd parameter.","2025-08-01",0.17052,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":58},"CVE-2013-10069","The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.","2025-08-05",0.16721,{"cveId":60,"description":61,"publishedDate":12,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":62},"CVE-2018-25115","Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system shell without sanitization. A crafted HTTP POST request can inject commands that are executed with root privileges, resulting in full device compromise. These router models are no longer supported at the time of assignment and affected version ranges may vary. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-08-21 UTC.",0.10133,{"cveId":64,"description":65,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":66},"CVE-2023-33626","D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.",0.01531,[68],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"severity":35,"isKev":4,"epssScore":36,"cisaVulnName":69,"cisaDateAdded":70,"cisaShortDescription":71,"cisaRequiredAction":72},"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","2024-05-16","D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.","This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.",{"title":74,"metaDescription":75,"keywords":76,"structuredData":77},"Dir-600 by Dlink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Dir-600 by Dlink covering 3 versions with 7 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Dir-600 vulnerabilities, Dir-600 security, Dir-600 CVE, Dlink Dir-600, Dir-600 threat intelligence, Dlink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Dir-600 KEV, Dir-600 exploited vulnerabilities",{"@context":78,"@type":79,"name":80,"description":75,"url":81,"manufacturer":82,"applicationCategory":86,"softwareVersion":87,"mainEntity":88},"https:\u002F\u002Fschema.org","SoftwareApplication","Dir-600","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdlink\u002Fdir-600",{"@type":83,"name":84,"url":85},"Organization","Dlink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdlink","Security Software","3 versions tracked",{"@type":89,"name":90,"description":91,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Dir-600 Security Vulnerabilities","Security vulnerabilities affecting Dir-600 by Dlink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":93,"apiVersion":94},"2026-10-17T20:47:00.722Z","3.0",[96,98,100],{"product":97,"cves":10},"dir-600_firmware",{"product":99,"cves":22},"dir-600_b1",{"product":101,"cves":22},"dir-600_b1_firmware",{"rows":103,"total":11,"capped":17,"failed":16},[104],{"cveId":30,"name":69,"severity":35,"cvss":33,"added":70,"epss":36,"published":105,"ranges":106,"checked":4,"hits":107,"covers":17},"2015-01-13T11:59:04.477",[],[]]