CVE-2019-13562: D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/ping_response.cgi pin...

Security readout for executives and security teams

CVE-2019-13562 is a cross-site scripting issue in D-Link DIR-655 hardware revision C routers running firmware before 3.02B05 BETA03. An attacker could cause script execution in the router’s web interface through specific parameters. This matters most where affected routers are still deployed and their management interface is reachable by users or untrusted networks. Exposure is limited to D-Link DIR-655 revision C devices on firmware earlier than 3.02B05 BETA03. Risk increases if the router administration interface is accessible from user networks, guests, or the internet. Organizations may overlook these devices because they are older small-office or edge network equipment. Treat as a targeted network hygiene issue, not an emergency absent evidence of exploitation. Prioritize if affected routers manage sensitive networks, expose administration broadly, or cannot be updated. Replacement may be more practical than remediation for aging devices. Mitigation focus: Inventory for D-Link DIR-655 revision C routers.; Upgrade affected devices to 3.02B05 BETA03 or vendor-supported newer firmware.; Restrict router management access to trusted administrative networks only..

Prepared

Jun 7, 2026, 22:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.