Dir 605 Firmware
Monthly
Command injection in the Firmware Update Service of the end-of-life D-Link DIR-605 router running firmware 202WWB03 (2.02WW) lets an attacker who holds administrative access to the device's management interface inject and execute arbitrary shell commands on the underlying firmware. Exploitation requires high-privilege access per the CVSS PR:H metric - in practice valid, default, or weak admin credentials, or an admin interface exposed to an untrusted network - and no user interaction is needed. Publicly available exploit code exists (a detailed proof-of-concept writeup is already circulating), and EPSS stands at 10.96% (96th percentile), indicating elevated real-world likelihood; there is no confirmed active exploitation (CISA KEV) at time of analysis, and because the product is no longer supported by D-Link, no vendor patch is expected.
Command injection in the Firmware Update Service of the end-of-life D-Link DIR-605 router running firmware 202WWB03 (2.02WW) lets an attacker who holds administrative access to the device's management interface inject and execute arbitrary shell commands on the underlying firmware. Exploitation requires high-privilege access per the CVSS PR:H metric - in practice valid, default, or weak admin credentials, or an admin interface exposed to an untrusted network - and no user interaction is needed. Publicly available exploit code exists (a detailed proof-of-concept writeup is already circulating), and EPSS stands at 10.96% (96th percentile), indicating elevated real-world likelihood; there is no confirmed active exploitation (CISA KEV) at time of analysis, and because the product is no longer supported by D-Link, no vendor patch is expected.