ExploitPublished 10 Apr 2026

D-Link DIR-650IN - Authenticated Command Injection

Source Exploit-DB RSS Feed

Severity

Medium

Rated by Threat Radar

Data as of 22 Apr 2026, 07:07 UTC

What to do

AI-suggested

Until an official fix is available, restrict access to the router's web interface to trusted users only and enforce strong authentication credentials. Avoid exposing the router management interface to untrusted networks. Consider network segmentation to limit attacker reach if compromise occurs. Monitor for unauthorized access attempts.

Description

D-Link DIR-650IN - Authenticated Command Injection

Impact

Successful exploitation allows an authenticated attacker to execute arbitrary operating system commands on the router, resulting in full compromise. This includes the ability to read sensitive system files such as /etc/passwd, potentially exposing user credentials and system information. The integrity and confidentiality of the router are severely impacted, which could facilitate further network attacks or persistent control over the device.

Indicators of compromise

Exploit source code

Exploit code for D-Link DIR-650IN - Authenticated Command Injection1,537 characters

# Exploit Title: D-Link DIR-650IN - Authenticated Command Injection
# Date: 2023-01-08
# Exploit Author: Sanjay Singh
# Vendor Homepage: https://www.dlink.com
# Software Link: https://dlinkmea.com/index.php/product/details?det=T082aVdUWUFNR2FRblBBQUxMWlVTZz09
# Version: Firmware V1.04 (REQUIRED)
# Tested on: DIR-650IN Web UI (Boa/0.94.14rc21), Windows 10 / Chrome 108
# CVE: N/A (Version included now, previously missing)

Description:
The D-Link DIR-650IN Wireless N300 Router is vulnerable to an …

References

Community reviews

Loading reviews…