Dir 655
Vendor:
First CVE: Jan 5, 2015 · Active for 11 years
7
Total CVEs
More Total CVEs than 80% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
8.2
Avg CVSS
Higher Avg CVSS than 82% of tracked products
14.3%
KEV Rate
Higher KEV Rate than 98% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Dir 655 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 5, 2015
11 years ago
Most Recent CVE
Jun 17, 2025
402 days ago
CVE Severity & Scoring
Dir 6557 CVEs
29%
29%
43%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (85.7%)
Unknown1 (14.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (85.7%)
High0 (0.0%)
Unknown1 (14.3%)
User Interaction
None4 (57.1%)
Unknown1 (14.3%)
Required2 (28.6%)
Privileges Required
Low1 (14.3%)
High0 (0.0%)
None5 (71.4%)
Unknown1 (14.3%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-16920CRITICAL Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a | Sep 27, 2019 | 9.8 | 98 | YES | YES |
CVE-2019-13561CRITICAL D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter | Jul 11, 2019 | 9.8 | 34 | NO | NO |
CVE-2019-13560CRITICAL D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to force a blank password via the apply_sec.cgi setup_wizard parameter. | Jul 11, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-13563HIGH D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console. | Jul 11, 2019 | 8.8 | 26 | NO | NO |
CVE-2025-6158HIGH A vulnerability classified as critical has been found in D-Link DIR-665 1.00. This affects the function sub_AC78 of the component HTTP POST Request Handler. The manipulation leads | Jun 17, 2025 | 8.8 | 25 | NO | NO |
CVE-2019-13562MEDIUM D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi ping_ipaddr parameter, the /www/ping6_response.cgi ping6_ipaddr parameter, a | Jul 11, 2019 | 6.1 | 21 | NO | NO |
CVE-2014-9518MEDIUM Cross-site scripting (XSS) vulnerability in login.cgi in D-Link router DIR-655 (rev Bx) with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML | Jan 5, 2015 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
1 CVE
14.3% of CVEs· 98th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
14.3% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Dir 655
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| bx | 1 | 4.3 | 1.0% | 0 | 0 |