CVE-2019-16326

CVE-2019-16326 affects the D-Link DIR-601 B1 (firmware 2.00NA). It describes a CSRF vulnerability due to absence of an anti‑CSRF token, enabling potential remote router management when combined with CVE-2019-16327. The end‑of‑life DIR‑601 B1 is noted in the entry. The connected documents also ref...

CVE-2019-16327

CVE-2019-16327 affects the D-Link DIR-601 B1 router (version 2.00NA). The vulnerability is an authentication bypass where the device does not enforce authentication on the server side, relying on client-side validation, which is bypassable. It is documented alongside a related CSRF issue (CVE-201...

CVE-2018-5708

CVE-2018-5708 affects the D-Link DIR-601 B1 device (firmware 2.02NA). An unauthenticated attacker on the same local network can access the admin panel and read the cleartext admin credentials via the response that contains the configuration file restore_default in XML, exposing the admin username...

CVE-2018-12710

CVE-2018-12710 affects D-Link DIR-601 devices (firmware about 2.02NA). A local attacker with a low-privilege User account can intercept a POST response and view the admin password in XML, gaining Admin rights. The issue is evidenced by multiple sources (NVD/NVD entry, Exploit-DB PoC, CNVD entry, ...

CVE-2018-10641

CVE-2018-10641 affects the D-Link DIR-601 A1 (firmware version 1.02NA). The vulnerability allows password changes without presenting the current password, and the new credentials are transmitted in cleartext. This constitutes an authentication bypass enabling potential information exposure (param...

CVE-2011-4821

CVE-2011-4821 relates to a directory traversal flaw in the TFTP server of the D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA. The vulnerability allows remote attackers to read arbitrary files via unspecified vectors. The available sources do not specify a concrete exploit, affected...