CVEvulnerability
CVE-2019-13101
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-306
Description
An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.
Affected configurations
• dlink dir-600m firmware 3.02
• dlink dir-600m firmware 3.03
• dlink dir-600m firmware 3.04
• dlink dir-600m firmware 3.06
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Aug/5 Mailing List, Third Party Advisory
- https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101 Third Party Advisory
- https://seclists.org/bugtraq/2019/Aug/17 Mailing List, Third Party Advisory
- https://us.dlink.com/en/security-advisory Vendor Advisory
- https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf Third Party Advisory, US Government Resource
- http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2019/Aug/5 Mailing List, Third Party Advisory
- https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101 Third Party Advisory
- https://seclists.org/bugtraq/2019/Aug/17 Mailing List, Third Party Advisory
- https://us.dlink.com/en/security-advisory Vendor Advisory
- https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf Third Party Advisory, US Government Resource