CVE-2019-13101: dlink dir-600m_firmware
Vulnerability summary
CVE-2019-13101 is a critical (CVSS 9.8) vulnerability in dlink dir-600m_firmware. EPSS estimates a 67.09% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 08-08-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
67.09%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 67.09% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundD-Link DIR-600M - Authentication Bypass (Metasploit)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Dlink1 product
- dir-600m_firmware3.02 | 3.03 | 3.04 | 3.06
1 vendor · 1 product
References
6 links- www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdfX Refsource MISCThird Party AdvisoryUS Government Resource
- packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.htmlX Refsource MISCThird Party AdvisoryVDB Entry