CVE-2019-13561: D-Link Dir-655 Firmware

Critical severity, CVSS 9.8. EPSS: 8.4% chance of exploitation in the next 30 days.

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter.

Affected products

• D-Link Dir-655 Firmware: version 3.02b05 only

Published 2019-07-11. Last modified 2026-06-17.