Critical severity9.8NVD Advisory· Published Sep 7, 2017· Updated Jun 17, 2026

CVE-2016-10405

Description

Session fixation vulnerability in D-Link DIR-600L routers (rev. Ax) with firmware before FW1.17.B01 allows remote attackers to hijack web sessions via unspecified vectors.

Affected products

Dlink/Dir 600l Firmware
cpe:2.3:o:d-link:dir-600l_firmware:*:b01:*:*:*:*:*:*
Range: <=1.16
Dlink/DIR600Lllm-create
Range: <FW1.17.B01

Patches

Vulnerability mechanics

References

ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600L/DIR-600L_REVA_FIRMWARE_PATCH_NOTES_1.17.B01_EN_WW.PDFnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000