D-Link DIR-600
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-2163 | 2.15WWb02 | D-Link DIR-600 ssdp.cgi command injection | MEDIUM 5.1 | 6.6 % | ||
| CVE-2026-0625 | | D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint | CRITICAL 9.3 | 1.0 % | ||
| CVE-2025-15194 | 2.15WWb02 | D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow | CRITICAL 9.3 | 1.2 % | ||
| CVE-2018-25115 | * | D-Link DIR-110/412/600/615/645/815 RCE via service.cgi | CRITICAL 10.0 | 10 % | ||
| CVE-2013-10048 | ≤ 2.14b01 | D-Link Devices command.php Unauthenticated RCE | CRITICAL 9.3 | 17 % | ||
| CVE-2024-7357 | 2.0 ; 2.1 ; 2.2 ; … | D-Link DIR-600 soap.cgi soapcgi_main os command injection | MEDIUM 5.3 | 5.7 % |