D-Link DSL-g624t vulnerabilities

3 CVEs affecting D-Link DSL-g624t, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-5538, published 2006-10-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-5536, published 2006-10-26. Medium severity, CVSS 5.0. EPSS: 13.9% chance of exploitation in the next 30 days. Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. (dot dot) in the getpage parameter.
CVE-2006-5538, published 2006-10-26. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request.
CVE-2006-5537, published 2006-10-26. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1)…