PatchTheCVEdir-300 firmware vulnerabilities and fixes
Recent CVEs affecting dir-300 firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: dir 300 firmware, dir-300firmware.
dir-300 firmware has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-08-05. Highest priority: CVE-2013-10069 (score 72/100).
- CVE-2024-41616 CRITICAL 9.8 MITIGATE D-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.
- CVE-2013-10069 CRITICAL 9.8 UPGRADE UPGRADE The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), co
- CVE-2013-10050 HIGH 8.8 UPGRADE UPGRADE An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and
- CVE-2013-10048 CRITICAL 9.8 UPGRADE UPGRADE An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-
FAQ
How do I fix dir-300 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dir-300 firmware being exploited right now?
None of the tracked dir-300 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dir-300 firmware CVE should I patch first?
CVE-2013-10069 currently ranks highest (72/100): The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), co.