{"id":"CVE-2019-13101","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-13101","generatedAt":"2026-10-29T02:04:45.593Z","title":"An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the…","description":"An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.","published":"2019-08-08T13:15:12.000Z","lastModified":"2026-06-17T02:16:04.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-306"],"affected":["dlink/dir-600m firmware"],"epss":{"score":0.67091,"percentile":0.99296,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2019-08-14","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":47250,"kind":"exploit","title":"D-Link DIR-600M - Authentication Bypass (Metasploit)","url":"https://www.exploit-db.com/exploits/47250","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/webapps/47250.rb","file":"exploits/hardware/webapps/47250.rb","published":"2019-08-14","added":"2019-08-14","updated":"2019-08-14","author":"Devendra Singh Solanki","type":"webapps","platform":"hardware","port":80,"verified":false,"codes":["CVE-2019-13101"],"tags":"Authentication Bypass / Credentials Bypass (AB/CB)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 67.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.html","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2019/Aug/5","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://seclists.org/bugtraq/2019/Aug/17","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://us.dlink.com/en/security-advisory","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf","tags":["Third Party Advisory","US Government Resource"],"source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.html","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2019/Aug/5","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://seclists.org/bugtraq/2019/Aug/17","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://us.dlink.com/en/security-advisory","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdf","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-13101","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}