CVE-2017-12943: D-Link DIR-600 b1 Firmware

Critical severity, CVSS 9.8. EPSS: 39.2% chance of exploitation in the next 30 days.

D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the admin password.

Affected products

• D-Link DIR-600 b1 Firmware: version 2.01 only

Published 2017-08-18. Last modified 2026-06-17.