Approved changes feed: RSS · Atom

cpe:2.3:a:d-link:dir-600_rev_b:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDir 600 Rev B (a239d765-1e10-5be4-ae30-24ab955296c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-10069 vulnerable 2026-06-08 05:03:51.955446 D-Link Devices Unauthenticated RCE
The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.
Published: 2025-08-05T20:01:04.000Z
Updated: 2026-05-15T11:14:20.275Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.