Dir 600L Firmware
Monthly
D-Link DIR-600L hardware revision A1 exposes a root telnet login to any attacker on the adjacent LAN or Wi-Fi segment through a static 'Alphanetworks' credential set that starts automatically at boot. No prior access is needed (CVSS PR:N), and successful login gives full administrative control; the device is end-of-life and will not receive a vendor patch. SSVC records proof-of-concept exploitation and total technical impact, while EPSS is low at 0.06% (19th percentile) and the vuln.today priority is monitor, so practical exposure is concentrated in same-segment deployments.
Hardcoded telnet credentials in D-Link DIR-600L Hardware Revision B1 grant an attacker on the adjacent/local network a root shell with full administrative control. The telnet daemon starts automatically at boot in the default configuration, and the static username and password are publicly known, so no authentication knowledge beyond that pair is required. SSVC records proof-of-concept-level exploitation and total technical impact, while EPSS is low at 0.08% (24th percentile) and no CISA KEV entry confirms active exploitation; the device is End-of-Life and will not receive patches.
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.
Buffer overflow in D-Link DIR-600L AX firmware 1.16WWb01 allows a network-reachable attacker who can invoke the formSetWAN_Wizard52 handler with an oversized curTime value to potentially achieve high confidentiality, integrity, and availability impact. The independent assessment uses CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting an authenticated-context assumption while noting the sources do not confirm whether an admin session is required, in contrast with the headline PR:N vector; default LAN-only exposure and end-of-life status limit realistic risk. No CISA KEV listing or confirmed public exploit code is present in the supplied data, EPSS is 0.41% (35th percentile), and the vuln.today decision label is act_now, so the conflicting signals should be weighed together rather than read from the headline CVSS alone.
A stack-based buffer overflow in D-Link DIR-600L Ax firmware 1.16WWb01 can be triggered through the curTime parameter in the formTcpipSetup handler, allowing an attacker who can reach the router's web management interface to crash the device and cause denial of service. The supplied CVSS vector scores 7.5 HIGH with only availability impact (C:N/I:N/A:H), but the independent assessment notes that unauthenticated reachability of formTcpipSetup is not confirmed and that such configuration endpoints are commonly post-authentication; practical exposure is therefore limited to attackers with web-UI credentials or to networks exposing the management interface. No CISA KEV entry is present, EPSS is low at 0.37% (31st percentile), and the supplied data does not confirm working exploit code, although a public technical write-up is referenced.
A stack-based buffer overflow in the D-Link DIR-600L Ax router firmware 1.16WWb01 (FW116WWb01) lets remote attackers crash the device by sending an oversized curTime parameter to the formEasySetTimezone handler on the web management interface. The official CVSS 3.1 score of 7.5 is driven entirely by availability impact (C:N/I:N/A:H), so the scoring treats this as a remote denial-of-service against the router rather than a confirmed code-execution path; confidentiality and integrity impacts are rated None. No exploitation has been confirmed in the field (not in CISA KEV), EPSS is low at 0.37% (31st percentile), and a public write-up with proof-of-concept detail exists on GitHub but is not verified as working exploit code; the priority label is this_week. The CVSS vector indicates PR:N, but the sources do not confirm whether the affected handler is reachable pre- or post-authentication.
A stack-based buffer overflow in the D-Link DIR-600L Ax consumer router (firmware 1.16WWb01) lets remote attackers crash or destabilize the device by supplying an oversized curTime parameter to the formAutoDetecWAN_wizard4 WAN auto-detect wizard handler. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:N/I:N/A:H) rates it 7.5 because impact is scored as availability-only, though no vendor advisory in the available sources confirms whether that endpoint is reachable before or after authentication. Exploitation is not confirmed in the wild (not in CISA KEV) and EPSS is low at 0.37% (31st percentile); a public PoC reference exists in a GitHub write-up, it is not verified as working exploit code. Practical exposure is constrained because the management interface is normally LAN-facing and the product is an end-of-life consumer device.
Stack-based buffer overflow in D-Link DIR-600L firmware 1.16WWb01 allows remote attackers to crash the router's HTTP management service by sending an oversized curTime parameter to the formLogDnsquery handler. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) rates this 7.5 with high availability impact only; the PR:N/UI:N authentication assumptions are from the vector and are not independently confirmed, and documented impact is service availability loss rather than code execution. EPSS is 0.46% (40th percentile), a public PoC reference exists but is not verified as working exploit code, and the vuln.today priority label is this_week.
A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Session fixation vulnerability in D-Link DIR-600L routers (rev. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
D-Link DIR-600L hardware revision A1 exposes a root telnet login to any attacker on the adjacent LAN or Wi-Fi segment through a static 'Alphanetworks' credential set that starts automatically at boot. No prior access is needed (CVSS PR:N), and successful login gives full administrative control; the device is end-of-life and will not receive a vendor patch. SSVC records proof-of-concept exploitation and total technical impact, while EPSS is low at 0.06% (19th percentile) and the vuln.today priority is monitor, so practical exposure is concentrated in same-segment deployments.
Hardcoded telnet credentials in D-Link DIR-600L Hardware Revision B1 grant an attacker on the adjacent/local network a root shell with full administrative control. The telnet daemon starts automatically at boot in the default configuration, and the static username and password are publicly known, so no authentication knowledge beyond that pair is required. SSVC records proof-of-concept-level exploitation and total technical impact, while EPSS is low at 0.08% (24th percentile) and no CISA KEV entry confirms active exploitation; the device is End-of-Life and will not receive patches.
The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.
Buffer overflow in D-Link DIR-600L AX firmware 1.16WWb01 allows a network-reachable attacker who can invoke the formSetWAN_Wizard52 handler with an oversized curTime value to potentially achieve high confidentiality, integrity, and availability impact. The independent assessment uses CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting an authenticated-context assumption while noting the sources do not confirm whether an admin session is required, in contrast with the headline PR:N vector; default LAN-only exposure and end-of-life status limit realistic risk. No CISA KEV listing or confirmed public exploit code is present in the supplied data, EPSS is 0.41% (35th percentile), and the vuln.today decision label is act_now, so the conflicting signals should be weighed together rather than read from the headline CVSS alone.
A stack-based buffer overflow in D-Link DIR-600L Ax firmware 1.16WWb01 can be triggered through the curTime parameter in the formTcpipSetup handler, allowing an attacker who can reach the router's web management interface to crash the device and cause denial of service. The supplied CVSS vector scores 7.5 HIGH with only availability impact (C:N/I:N/A:H), but the independent assessment notes that unauthenticated reachability of formTcpipSetup is not confirmed and that such configuration endpoints are commonly post-authentication; practical exposure is therefore limited to attackers with web-UI credentials or to networks exposing the management interface. No CISA KEV entry is present, EPSS is low at 0.37% (31st percentile), and the supplied data does not confirm working exploit code, although a public technical write-up is referenced.
A stack-based buffer overflow in the D-Link DIR-600L Ax router firmware 1.16WWb01 (FW116WWb01) lets remote attackers crash the device by sending an oversized curTime parameter to the formEasySetTimezone handler on the web management interface. The official CVSS 3.1 score of 7.5 is driven entirely by availability impact (C:N/I:N/A:H), so the scoring treats this as a remote denial-of-service against the router rather than a confirmed code-execution path; confidentiality and integrity impacts are rated None. No exploitation has been confirmed in the field (not in CISA KEV), EPSS is low at 0.37% (31st percentile), and a public write-up with proof-of-concept detail exists on GitHub but is not verified as working exploit code; the priority label is this_week. The CVSS vector indicates PR:N, but the sources do not confirm whether the affected handler is reachable pre- or post-authentication.
A stack-based buffer overflow in the D-Link DIR-600L Ax consumer router (firmware 1.16WWb01) lets remote attackers crash or destabilize the device by supplying an oversized curTime parameter to the formAutoDetecWAN_wizard4 WAN auto-detect wizard handler. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N, C:N/I:N/A:H) rates it 7.5 because impact is scored as availability-only, though no vendor advisory in the available sources confirms whether that endpoint is reachable before or after authentication. Exploitation is not confirmed in the wild (not in CISA KEV) and EPSS is low at 0.37% (31st percentile); a public PoC reference exists in a GitHub write-up, it is not verified as working exploit code. Practical exposure is constrained because the management interface is normally LAN-facing and the product is an end-of-life consumer device.
Stack-based buffer overflow in D-Link DIR-600L firmware 1.16WWb01 allows remote attackers to crash the router's HTTP management service by sending an oversized curTime parameter to the formLogDnsquery handler. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) rates this 7.5 with high availability impact only; the PR:N/UI:N authentication assumptions are from the vector and are not independently confirmed, and documented impact is service availability loss rather than code execution. EPSS is 0.46% (40th percentile), a public PoC reference exists but is not verified as working exploit code, and the vuln.today priority label is this_week.
A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability was found in D-Link DIR-600L up to 2.07B01 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Session fixation vulnerability in D-Link DIR-600L routers (rev. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.