PatchTheCVECVE-2019-13101: An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices
CVE-2019-13101 is a critical-severity flaw (CVSS 9.8) affecting dir-600m firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.
Why this priority
- Critical severity
- EPSS top 1%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 67.1% (top 1%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2019-08-08 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- GitHub PoC: halencarjunior/dlkploit600 (0 stars)
- Exploit-DB: D-Link DIR-600M - Authentication Bypass (Metasploit)
- Nuclei scan template: D-Link DIR-600M - Authentication Bypass
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-13101?
dir-600m firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2019-13101 being exploited?
CVE-2019-13101 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-13101 affect?
CVE-2019-13101 affects dir-600m firmware. Severity is critical (CVSS 9.8). An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to m
How urgent is CVE-2019-13101?
Priority 69/100. Critical severity; EPSS top 1%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2024-1786 HIGH 7.5 MITIGATE ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DI
- CVE-2020-13960 HIGH 7.5 MITIGATE MITIGATE D-Link DSL 2730-U IN_1.10 and IN_1.11 and DIR-600M 3.04 devices have the domain.name string in the DNS resolve
- CVE-2019-7736 CRITICAL 9.8 MITIGATE D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page
- CVE-2018-16605 MEDIUM 5.4 MITIGATE D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
- CVE-2017-9100 HIGH 8.8 MITIGATE login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by en