D-Link · DIR-600 Router
CVE-2014-100005
D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
What it is
Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.
CISA: D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.
What to do
This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
Deadline for US federal agencies: June 6, 2024
More exploited flaws from D-Link
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Apr 24, 2026 | Command Injection | DIR-823X | High 7.2 | 88% |
| Dec 8, 2025 | Buffer Overflow | Routers | Critical 9.8 | 56% |
| Aug 5, 2025 | Unspecified | DCS-2530L and DCS-2670L Devices | High 7.5 | 98% |
| Aug 5, 2025 | DCS-2530L and DCS-2670L Command Injection | DCS-2530L and DCS-2670L Devices | High 8.8 | 54% |
| Aug 5, 2025 | Download of Code Without Integrity Check | DNR-322L | High 8.8 | 34% |
| Jun 25, 2025 | D-Link DIR-859 Router Path Traversal | DIR-859 Router | Medium 5.3 | 83% |
| Sep 30, 2024 | OS Command Injection | DIR-820 Router | Critical 9.8 | 98% |
| May 16, 2024 | Information Disclosure | DIR-605 Router | High 7.5 | 87% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.