Skip to content
OpenAdvisories

Product · D-Link

DIR-600

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-0625

    D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint

    Multiple D-Link DSL/DIR/DNS devices contain an authentication bypass and improper access control vulnerability in the dnscfg.cgi endpoint that allows an unauthenticated attacker to access DNS configuration functionality. By directly requesting this endpoint, …

    D-Link DNS-320 DNS-325 DNS-345 Network devices
  • Critical 9.8
    CVE-2025-15194

    D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow

    A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality of the file hedwig.cgi of the component HTTP Header Handler. The manipulation of the argument Cookie results in stack-based buffer overflow…

    D-Link DIR-600 Network devices
  • Critical 10.0
    CVE-2018-25115 EPSS 10%

    D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

    Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands withou…

    D-Link DIR-615 DIR-600 DIR-645 Network devices
  • Critical 9.3
    CVE-2013-10048 Public exploit EPSS 17%

    D-Link Devices command.php Unauthenticated RCE

    An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially cr…

    D-Link DIR-600 DIR-300 Network devices