Dlink Dir-600 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-600 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2013-10048 — CVSS 9.8 (critical): An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and…
• CVE-2013-10069 — CVSS 9.8 (critical): The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated…
• CVE-2013-7471 — CVSS 9.8 (critical): An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11…
• CVE-2023-33625 — CVSS 9.8 (critical): D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter…
• CVE-2023-33626 — CVSS 9.8 (critical): D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.
• CVE-2025-15194 — CVSS 9.8 (critical): A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file…
• CVE-2018-25115 — CVSS 9.8 (critical): Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03…
• CVE-2014-100005 — CVSS 8.0 (high) — actively exploited: Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote…
• CVE-2024-7357 — CVSS 6.3 (medium): ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects…
• CVE-2026-2163 — CVSS 4.7 (medium): A vulnerability was identified in D-Link DIR-600 up to 2.15WWb02. This vulnerability affects unknown code of the file ssdp.cgi. Such…