CVE-2019-13562: D-Link Dir-655 Firmware

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_response.cgi ping6_ipaddr parameter, and the /www/apply_sec.cgi html_response_return_page parameter.

Affected products

• D-Link Dir-655 Firmware: version 3.02b05 only

Published 2019-07-11. Last modified 2026-06-17.