Dir-600 firmware

This hub aggregates every CVE we track for Dir-600 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Dir-600 firmware.

• CVE-2026-2163D-Link DIR-600 ssdp.cgi command injection4.7Feb 8, 2026
• CVE-2025-15194D-Link DIR-600 HTTP Header hedwig.cgi stack-based overflow9.8Dec 29, 2025
• CVE-2018-25115D-Link DIR-110/412/600/615/645/815 RCE via service.cgi9.8Aug 27, 2025
• CVE-2013-10069D-Link Devices Unauthenticated RCE9.8Aug 5, 2025
• CVE-2013-10048D-Link Devices command.php Unauthenticated RCE9.8Aug 1, 2025
• CVE-2024-7357D-Link DIR-600 soap.cgi soapcgi_main os command injection6.3Aug 1, 2024
• CVE-2023-33626D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.9.8Jun 12, 2023
• CVE-2023-33625D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.9.8Jun 12, 2023
• CVE-2013-7471An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Inj...9.8Jun 11, 2019
• CVE-2014-100005Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for ...KEV8.0Jan 13, 2015