Dlink Dir-655 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dlink Dir-655 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-13560 — CVSS 9.8 (critical): D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard…
• CVE-2019-13561 — CVSS 9.8 (critical): D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the…
• CVE-2019-16920 — CVSS 9.8 (critical) — actively exploited: Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when…
• CVE-2019-13563 — CVSS 8.8 (high): D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console.
• CVE-2025-6158 — CVSS 8.8 (high): A vulnerability classified as critical has been found in D-Link DIR-665 1.00. This affects the function sub_AC78 of the component HTTP POST…
• CVE-2019-13562 — CVSS 6.1 (medium): D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the…