D-Link Dir-601 Firmware vulnerabilities
6 CVEs affecting D-Link Dir-601 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-16327, published 2019-12-26.
More from D-Link.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2018-12710, published 2018-08-29. High severity, CVSS 8.0. EPSS: 76.5% chance of exploitation in the next 30 days. An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response…
- CVE-2018-5708, published 2018-03-30. High severity, CVSS 8.0. EPSS: 6% chance of exploitation in the next 30 days. An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the admin username and…
- CVE-2011-4821, published 2014-06-20. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA allows remote attackers to read arbitrary files via unspecified vectors.
- CVE-2019-16327, published 2019-12-26. Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days. D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this…
- CVE-2018-10641, published 2018-05-04. High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days. D-Link DIR-601 A1 1.02NA devices do not require the old password for a password change, which occurs in cleartext.
- CVE-2019-16326, published 2019-12-26. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and…