CVE-2026-42374

D-Link DIR-600L Hardware Revision B1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn61dlwbrdir600L" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

CVE-2026-42375

D-Link DIR-600L Hardware Revision A1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir600l" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

CVE-2026-42375 D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials

D-Link DIR-600L Hardware Revision A1 End-of-Life contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir600l" read from /etc/alphaconfig/imagesign. The custom telnetd binary accep...

PT-2026-36836

Name of the Vulnerable Software and Affected Versions D-Link DIR-600L Hardware Revision A1 Description A hardcoded telnet backdoor exists in the device. At boot, the device starts a telnet daemon via the /bin/telnetd.sh script using the username "Alphanetworks" and a static password "wrgn35 dlwbr...

The vulnerability of the formSetMACFilter() function in D-Link DIR600L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetMACFilter function in D-Link DIR600L router microprogramming software is related to the copying of buffer data without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the formAdvNetwork() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formAdvNetwork function in D-Link DIR600L router software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the formAutoDetecWAN_wizard4() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formAutoDetecWANwizard4 function in the microprogrammed routing software of D-Link DIR600L lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the formSchedule() function in D-Link DIR600L router software allows a hacker to induce a maintenance failure.

The vulnerability of the formSchedule function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the formSetPortTr() function in D-Link DIR600L router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formSetPortTr function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the formSetWAN_Wizard52() function in D-Link DIR600L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWANWizard52 function in the microprogramming software for D-Link DIR600L routers arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formVirtualServ() function in D-Link DIR600L router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the formVirtualServ function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the formTcpipSetup() function in D-Link DIR600L router software allows a hacker to cause a service failure.

The vulnerability of the formTcpipSetup function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the formEasySetTimezone() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formEasySetTimezone function in D-Link DIR600L router microprogramming software is related to the copying of buffer data without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of the formSetWAN_Wizard7() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formSetWANWizard7 function in the microprogramming software for D-Link DIR600L routers stems from the copying of buffer contents without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability could allow a malicio...

The vulnerability of the formSetEnableWizard() function in D-Link DIR600L router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetEnableWizard function in D-Link DIR600L router microprogramming software arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

D-Link DIR600L formSetRoute function buffer overflow vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

D-Link DIR600L formSetQoS function buffer overflow vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

D-Link DIR600L formSchedule function buffer overflow vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. A buffer overflow vulnerability exists in the D-Link DIR600L, which is caused by the...

D-Link DIR600L formSetMACFilter function buffer overflow vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

D-Link DIR600L formSetEasy_Wizard Function Buffer Overflow Vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. A buffer overflow vulnerability exists in the D-Link DIR600L, which is caused by the...