← Back

Dir 600m Firmware

dir-600m_firmware

Vendor: D Link • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-10676
1D Link
1Dir 600m Firmware
May 13, 2026
Jul 20, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
CVE-2017-5874
1D Link
1Dir 600m Firmware
May 13, 2026
Mar 22, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly have unspecified other impact.