Vulnerabilities (CVE)

Filtered by vendor Dlink Subscribe
Filtered by product Dir-600l
Total 38 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-42375 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35_dlwbr_dir600l" read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the custom login binary uses strcmp() to validate credentials. Successful authentication grants an unauthenticated attacker on the local network a root shell with full administrative control. The device has reached End-of-Life (EOL) and will not receive patches.
CVE-2026-42374 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn61_dlwbr_dir600L" read from /etc/alpha_config/image_sign. The custom telnetd binary accepts a -u user:password flag, and the custom login binary uses strcmp() to validate credentials. Successful authentication grants an unauthenticated attacker on the local network a root shell with full administrative control.  The device has reached End-of-Life (EOL) and will not receive patches.
CVE-2025-60572 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork.
CVE-2025-60571 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS.
CVE-2025-60570 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery.
CVE-2025-60569 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute.
CVE-2025-60568 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall.
CVE-2025-60566 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter.
CVE-2025-60565 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule.
CVE-2025-60564 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog.
CVE-2025-60563 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr.
CVE-2025-60562 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey.
CVE-2025-60561 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail.
CVE-2025-60559 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter.
CVE-2025-60558 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ.
CVE-2025-60557 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard.
CVE-2025-60556 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1.
CVE-2025-60555 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 7.5 HIGH
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode.
CVE-2025-60554 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard.
CVE-2025-60553 1 Dlink 2 Dir-600l, Dir-600l Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.