Dir-655 Firmware vulnerabilities

2 known vulnerabilities in Dir-655 Firmware from D-Link. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DIR-665: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-6158Jun 17, 2025D-LinkEPSS 1.3%

  A vulnerability classified as critical has been found in D-Link DIR-665 1.00. This affects the function sub_AC78 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely.

• 9.8 Critical severity

  D-Link Multiple Routers Command Injection Exploited

  CVE-2019-16920Sep 27, 2019D-LinkEPSS 100%

  Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection.