CVE-2019-13101

An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.

• CWE-306

• http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Aug/5Mailing List, Third Party Advisory
• https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101Third Party Advisory
• https://seclists.org/bugtraq/2019/Aug/17Mailing List, Third Party Advisory
• https://us.dlink.com/en/security-advisoryVendor Advisory
• https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdfThird Party Advisory, US Government Resource
• http://packetstormsecurity.com/files/153994/D-Link-DIR-600M-Wireless-N-150-Home-Router-Access-Bypass.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Aug/5Mailing List, Third Party Advisory
• https://github.com/d0x0/D-Link-DIR-600M/blob/master/CVE-2019-13101Third Party Advisory
• https://seclists.org/bugtraq/2019/Aug/17Mailing List, Third Party Advisory
• https://us.dlink.com/en/security-advisoryVendor Advisory
• https://www.ftc.gov/system/files/documents/cases/dlink_proposed_order_and_judgment_7-2-19.pdfThird Party Advisory, US Government Resource

Published

Aug 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13096TronLink Wallet 2.2.0 stores user wallet keystore in plainte…
• CVE-2019-13097The application API of Cat Runner Decorate Home version 2.8.…
• CVE-2019-13098The user password via the registration form of TronLink Wall…
• CVE-2019-13099The Momo application 2.1.9 for Android stores confidential i…
• CVE-2019-1310A denial of service vulnerability exists when Microsoft Hype…6.8
• CVE-2019-13100The Send Anywhere application 9.4.18 for Android stores conf…
• CVE-2019-13103A crafted self-referential DOS partition table will cause al…7.1
• CVE-2019-13104In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an u…7.8
• CVE-2019-13105Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can doub…
• CVE-2019-13106Das U-Boot versions 2016.09 through 2019.07-rc4 can memset()…7.8
• CVE-2019-13107Multiple integer overflows exist in MATIO before 1.5.16, rel…9.8
• CVE-2019-13108An integer overflow in Exiv2 through 0.27.1 allows an attack…6.5