CVE-2023-41603

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-10 · updated 2026-06-17
Weakness: CWE-284

Description

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6.

Affected products

Dlink R15 Firmware: through 1.08.02

References

https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10347
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10347

Get alerted when CVE-2023-41603 or the next vulnerability affects your stack