Read the docs

D-Link Japan K.K.

Records1707All Threatist records
Exploited (KEV)28In CISA KEV
CVSS critical457CVSS 9.0–10.0
CVSS high851CVSS 7.0–8.9

Exploited now

D-Link Japan K.K. records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Dir-600 Firmware · all components

TI-2013-06209 CVE-2013-10069 · GHSA-hfjr-pxjv-x4fv

D-Link Devices Unauthenticated RCE

Priority HIGH 82

The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.16258 Published 2025-08-05 No fix listed CWE-78
Priority HIGH 81

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated comman…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.16581 Published 2025-08-01 No fix listed CWE-78
Priority MEDIUM 61

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to e…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.10409 Published 2025-08-27 No fix listed CWE-78
TI-2026-01813 CVE-2026-2163 · GHSA-gfr2-w843-rf3v

D-Link DIR-600 ssdp.cgi command injection

Priority MEDIUM 56

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.06601 Published 2026-02-08 No fix listed CWE-74
Open these records in search →