CVE-2013-6026

Published: Oct 19, 2013Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.

Affected (13)

Products: Dlink: Di 524up, Di 604+, Di 604s, Di 604up, Di 624s, Dir 100, Dir 120, Tm G5240 · Alphanetworks: Vdsl Asl 55052, Vdsl Asl 56552 · Planex: Brl 04cw, Brl 04r, Brl 04ur

8 products

2 products

3 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Dlink Di 524up	All versions
Dlink Di 604+	All versions
Dlink Di 604s	All versions
Dlink Di 604up	All versions
Dlink Di 624s	All versions
Dlink Dir 100	All versions
Dlink Dir 120	All versions
Dlink Tm G5240	All versions