Dlink
Dlink Dir-600l Firmware: vulnerabilidades y CVE
Dlink Dir-600l Firmware tiene 36 vulnerabilidades publicadas, 26 de ellas en los últimos 12 meses. 4 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE36
Últimos 12 meses26
Críticas4
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2014-8361 | Crítica (9.8) | 100% | ⚠ Explotación activa | 1 may 2015 | The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-42375 | Alta (8.8) | 0.98% | — | 4 may 2026 | D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password… |
| CVE-2026-42374 | Alta (8.8) | 0.98% | — | 4 may 2026 | D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password… |
| CVE-2025-60566 | Alta (7.5) | 0.42% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter. |
| CVE-2025-60565 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule. |
| CVE-2025-60564 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog. |
| CVE-2025-60563 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetPortTr. |
| CVE-2025-60562 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey. |
| CVE-2025-60561 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail. |
| CVE-2025-60559 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter. |
| CVE-2025-60558 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ. |
| CVE-2025-60557 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasy_Wizard. |
| CVE-2025-60556 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1. |
| CVE-2025-60555 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode. |
| CVE-2025-60554 | Crítica (9.8) | 0.41% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard. |
| CVE-2025-60553 | Crítica (9.8) | 0.41% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52. |
| CVE-2025-60552 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup. |
| CVE-2025-60551 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the next_page parameter in the function formDeviceReboot. |
| CVE-2025-60550 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone. |
| CVE-2025-60549 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4. |
| CVE-2025-60548 | Crítica (9.8) | 0.41% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLanSetupRouterSettings. |
| CVE-2025-60547 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard7. |
| CVE-2025-60572 | Alta (7.5) | 0.46% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork. |
| CVE-2025-60571 | Alta (7.5) | 0.46% | — | 24 oct 2025 | D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS. |
| CVE-2025-60570 | Alta (7.5) | 0.46% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery. |
| CVE-2025-60569 | Alta (7.5) | 0.51% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute. |
| CVE-2025-60568 | Alta (7.5) | 0.37% | — | 24 oct 2025 | D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall. |
| CVE-2025-4350 | Alta (8.7) | 4.2% | — | 6 may 2025 | A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wake_on_lan. The manipulation of the argument host leads to command injection. The attack can be… |
| CVE-2025-4349 | Alta (8.7) | 4.2% | — | 6 may 2025 | A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate… |
| CVE-2025-4348 | Alta (8.7) | 2.4% | — | 6 may 2025 | A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been rated as critical. Affected by this issue is the function formSetWanL2TP. The manipulation of the argument host leads to buffer overflow. The… |
| CVE-2025-4347 | Alta (8.7) | 2.4% | — | 6 may 2025 | A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been declared as critical. Affected by this vulnerability is the function formWlSiteSurvey. The manipulation of the argument host leads to buffer… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.