GCVE - cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:dlink:dir-655_firmware:3.02b05:*:*:*:*:*:*:*

part: o version: 3.02b05 update: *

Vendor	Dlink (`b610c9ff-f722-5d9d-a6df-9bee7f4d4b44`)
Product	Dir 655 Firmware (`20dee3b2-8f08-5636-9b76-683210653f03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-13563`	vulnerable	2026-06-08 05:12:52.125536	Details available D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console. Published: 2019-07-11T14:59:38.000Z Updated: 2024-08-04T23:57:39.305Z Open on db.gcve.eu Reference links https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/csrf.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13562`	vulnerable	2026-06-08 05:12:52.125066	Details available D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_response.cgi ping6_ipaddr parameter, and the /www/apply_sec.cgi html_response_return_page parameter. Published: 2019-07-11T14:59:27.000Z Updated: 2024-08-04T23:57:39.385Z Open on db.gcve.eu Reference links https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/crosssitescripting.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13561`	vulnerable	2026-06-08 05:12:52.123267	Details available D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter. Published: 2019-07-11T14:59:14.000Z Updated: 2024-08-04T23:57:39.390Z Open on db.gcve.eu Reference links https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/commandinjection.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13560`	vulnerable	2026-06-08 05:12:52.121965	Details available D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter. Published: 2019-07-11T14:59:02.000Z Updated: 2024-08-04T23:57:39.428Z Open on db.gcve.eu Reference links https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2019/july/the-d-link-dir-655c-from-nothing-to-rce/ ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-655/REVC/DIR-655_REVC_RELEASE_NOTES_v3.02B05_BETA03.pdf https://www.nccgroup.trust/contentassets/7188fe7f130846ffa31827fc1661d120/setupwizard.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.