CVE-2016-10405: D-Link Dir-600l Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Session fixation vulnerability in D-Link DIR-600L routers (rev. Ax) with firmware before FW1.17.B01 allows remote attackers to hijack web sessions via unspecified vectors.

Affected products

• D-Link Dir-600l Firmware: up to and including 1.16

Published 2017-09-07. Last modified 2026-06-17.