CVE-2018-16605

Name of the Vulnerable Software and Affected Versions D-Link DIR-600M (affected versions not specified)

Description The issue allows for cross-site scripting (XSS) attacks through the Hostname and Username fields in the Dynamic DNS Configuration page. This can potentially lead to malicious script execution.

Recommendations For D-Link DIR-600M devices, as a temporary workaround, consider restricting access to the Dynamic DNS Configuration page until a patch is available. Avoid using the Hostname and Username fields in this page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.