CVE-2023-33625: D-Link DIR-600 Firmware

Critical severity, CVSS 9.8. EPSS: 33.2% chance of exploitation in the next 30 days.

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter in the lxmldbc_system() function.

Affected products

• D-Link DIR-600 Firmware: version 2.18 only

Published 2023-06-12. Last modified 2026-06-17.