Critical severity9.8NVD Advisory· Published Sep 7, 2017· Updated May 13, 2026

CVE-2016-10405

Description

Session fixation vulnerability in D-Link DIR-600L routers (rev. Ax) with firmware before FW1.17.B01 allows remote attackers to hijack web sessions via unspecified vectors.

Affected products

D-Link/Dir 600l Firmware
cpe:2.3:o:d-link:dir-600l_firmware:*:b01:*:*:*:*:*:*
Range: <=1.16

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-600L/DIR-600L_REVA_FIRMWARE_PATCH_NOTES_1.17.B01_EN_WW.PDFnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000