CVE-2013-6026

Name: CVE-2013-6026
Creator: NVD / NIST
Published: 2013-10-19T10:36:08.963+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 7.68%

Last modified Jun 16, 2026

CVE-2013-6026 is a vulnerability of currently unknown severity. The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.. EPSS estimates a 7.68% chance of exploitation in the next 30 days.

Description

The web interface on D-Link DIR-100, DIR-120, DI-624S, DI-524UP, DI-604S, DI-604UP, DI-604+, and TM-G5240 routers; Planex BRL-04R, BRL-04UR, and BRL-04CW routers; and Alpha Networks routers allows remote attackers to bypass authentication and modify settings via an xmlset_roodkcableoj28840ybtide User-Agent HTTP header, as exploited in the wild in October 2013.

Metrics

EPSS Probability

7.68%

93.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Dlink	Di-524up	All versions
Dlink	Di-604\+	All versions
Dlink	Di-604s	All versions
Dlink	Di-604up	All versions
Dlink	Di-624s	All versions
Dlink	Dir-100	All versions
Dlink	Dir-120	All versions
Dlink	Tm-G5240	All versions
Alphanetworks	Vdsl Asl-55052	All versions
Alphanetworks	Vdsl Asl-56552	All versions
Planex	Brl-04cw	All versions
Planex	Brl-04r	All versions
Planex	Brl-04ur	All versions

References

http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/Exploit
http://www.dlink.com/uk/en/support/security
http://www.kb.cert.org/vuls/id/248083US Government Resource
http://www.devttys0.com/2013/10/reverse-engineering-a-d-link-backdoor/Exploit
http://www.dlink.com/uk/en/support/security
http://www.kb.cert.org/vuls/id/248083US Government Resource

Timeline

Published: Oct 19, 2013
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-6026?

How severe is CVE-2013-6026?

Severity scoring for CVE-2013-6026 is pending analysis. The EPSS model estimates a 7.68% probability of exploitation in the next 30 days.

How do I fix CVE-2013-6026?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-6026?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST