PT-2026-6994 · D Link · Dir-600M

Lontan0 · Published 2026-02-04 · Updated 2026-02-08 · CVE-2026-2163

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-600 versions prior to 2.15WWb02

Description A flaw exists in D-Link DIR-600 firmware up to version 2.15WWb02 related to the ssdp.cgi file. Manipulation of the HTTP ST/REMOTE ADDR/REMOTE PORT/SERVER ID argument can lead to command injection. This issue is remotely exploitable. The exploit is publicly available. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations Update to a version prior to 2.15WWb02.

Exploit

Fix

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

BDU:2026-02473

CVE-2026-2163

Affected Products

Dir-600M

References · 12

• 🔥 https://github.com/LonTan0/CVE/blob/main/Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi%20of%20D-Link%20DIR%E2%80%91600.md#poc · Exploit
• 🔥 https://github.com/LonTan0/CVE/blob/main/Remote%20Arbitrary%20Command%20Execution%20Vulnerability%20in%20ssdpcgi%20of%20D-Link%20DIR%E2%80%91600.md · Exploit
• https://bdu.fstec.ru/vul/2026-02473 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-2163 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2163 · Vendor Advisory
• https://vuldb.com/?submit.751764 · Note
• https://t.me/CVEtracker/44112 · Telegram Post
• https://dlink.com · Note
• https://twitter.com/CVEnew/status/2020549131379323114 · Twitter Post
• https://t.me/cveNotify/151310 · Telegram Post
• https://vuldb.com/?ctiid.344865 · Note
• https://vuldb.com/?id.344865 · Note