CVE-2023-41603

Summary: CVE-2023-41603 affects the D-Link R15 router. Multiple sources list that prior to firmware version 1.08.02 the device did not enforce firewall restrictions for IPv6 traffic, allowing unauthenticated network access to services listening on IPv6. Affected product/versions: D-Link R15 firmw...

CVE-2025-60854

CVE-2025-60854 affects D-Link R15 (AX1500) prior to 1.20.02. The vulnerability allows command injection in httpd by manipulating the model name parameter during a password change on the web administrator page. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, no user interact...