Skip to content
Weekly Signal
Live intelligence Updated 21 Aug 2026 · 22:11 UTC

D-Link, Dlink · DIR-600 Router, Dir-600 Firmware

CVE-2014-100005

D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

Recommended action

Validate affected assets and exposure now, then remediate on an accelerated schedule. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.

View response plan
CVSS8.0
EPSS42.4%
KEVYes
ExploitationConfirmed exploitation
RemediationExplicit patch identified ↓

Assessment

Why it matters

CISA lists this vulnerability as known to be exploited; exploitation is confirmed; EPSS is 42.4%; technical severity is CVSS 8.0.

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account or (2) enable remote management via a crafted configuration module to hedwig.cgi, (3) activate new configuration settings via a SETCFG,SAVE,ACTIVATE action to pigwidgeon.cgi, or (4) send a ping via a ping action to diagnostic.php.

Who should care

  • Teams operating DIR-600 Router, Dir-600 Firmware
  • Vulnerability and exposure management teams
  • Security operations teams monitoring exploitation activity

Response plan

What I would do

  1. Confirm whether DIR-600 Router, Dir-600 Firmware is present in the environment.
  2. Identify affected versions and establish whether vulnerable services are exposed or reachable.
  3. This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.
  4. Review relevant security telemetry for evidence of attempted or successful exploitation.
  5. Document the remediation decision and track it to verified completion.

Treatment intelligence

Remediation intelligence

Not yet verified

Vendor sources are listed before government and third-party guidance. Confirm product applicability and change prerequisites before deployment.

Verification noteAutomated link verification has not completed for this guidance yet.

Patch

Required Action

Technical details

CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-352
Affected versions
D-Link DIR-600 Router; Dlink Dir-600 Firmware (End Including 2.16ww)
Fixed versions
No explicit fixed version is currently recorded.
Published
13 January 2015
Attack vector
Adjacent
Privileges required
Low
User interaction
None

Signal timeline

  1. CVE published
  2. Added to CISA KEV
  3. Latest EPSS score: 42.4%
  4. Signal calculated at 76

External references

Live public intelligence This assessment combines public-source evidence. Validate the affected product, version and exposure against your own environment before making a risk decision.