CVE-2023-41603: D-Link r15 Firmware

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to arbitrarily access any services running on the device that may be inadvertently listening via IPv6.

Affected products

• D-Link r15 Firmware: up to and including 1.08.02

Published 2024-01-10. Last modified 2026-06-17.