What’s Vulnerable › Products

D-Link DIR-600 vulnerabilities

11 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your D-Link DIR-600 version is affected

Exploited D-Link DIR-600 vulnerabilities

• CVE-2014-100005 — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

Latest D-Link DIR-600 vulnerabilities

• CVE-2026-2163 — D-Link DIR-600 ssdp.cgi command injection (CVSS 7.2)
• CVE-2026-0625 — D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint (CVSS 9.3)
• CVE-2025-15194 — D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow (CVSS 9.8)
• CVE-2018-25115 — D-Link DIR-110/412/600/615/645/815 RCE via service.cgi (CVSS 9.8)
• CVE-2013-10069 — D-Link Devices Unauthenticated RCE (CVSS 9.8)
• CVE-2013-10048 — D-Link Devices command.php Unauthenticated RCE (CVSS 9.8)
• CVE-2024-7357 — D-Link DIR-600 soap.cgi soapcgi_main os command injection (CVSS 9.8)
• CVE-2023-33626 — (CVSS 9.8)
• CVE-2023-33625 — (CVSS 9.8)
• CVE-2013-7471 — (CVSS 9.8)
• CVE-2014-100005 — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability (CVSS 8.0) — exploited