medium5.4Public exploit code
CVE-2018-6936
Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DIR-600M Wireless - Cross-Site Scripting2018-03-02 · webapps · hardware
Impact
Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dir-600m C1 Firmware | Version 3.01 |