Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: D-Link Japan K.K. Component: Dir-600 Firmware Clear all filters
TI-2026-01813 CVE-2026-2163 · GHSA-gfr2-w843-rf3v

D-Link DIR-600 ssdp.cgi command injection

Priority MEDIUM 56

A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.06601 Published 2026-02-08 No fix listed CWE-74
TI-2018-15341 CVE-2018-25115 · GHSA-f5fw-w387-r642

D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

Priority MEDIUM 61

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to e…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.10409 Published 2025-08-27 No fix listed CWE-78
TI-2013-06209 CVE-2013-10069 · GHSA-hfjr-pxjv-x4fv

D-Link Devices Unauthenticated RCE

Priority HIGH 82

The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.16258 Published 2025-08-05 No fix listed CWE-78
TI-2013-06189 CVE-2013-10048 · GHSA-w7gc-gxjh-pg78

D-Link Devices command.php Unauthenticated RCE

Priority HIGH 81

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated comman…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.16581 Published 2025-08-01 No fix listed CWE-78