CVE-2019-13560: D-Link Dir-655 Firmware

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter.

Affected products

• D-Link Dir-655 Firmware: version 3.02b05 only

Published 2019-07-11. Last modified 2026-06-17.