CVE-2025-6373

🗓️ 20 Jun 2025 23:31:05Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 18 Views🌐 WEB

Critical stack-based overflow in D-Link DIR-619L allows remote exploitation via formSetWizard1.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-6373	20 Jun 202523:44	–	circl
CNNVD	D-Link DIR-619L 安全漏洞	21 Jun 202500:00	–	cnnvd
CNVD	D-Link DIR-619L formWlSiteSurvey File Buffer Overflow Vulnerability	27 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-6373 D-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflow	20 Jun 202523:31	–	cvelist
EUVD	EUVD-2025-18795	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6373	21 Jun 202500:15	–	nvd
OpenVAS	D-Link DIR-619L Multiple Vulnerabilities (2024 - 2025)	8 Jan 202500:00	–	openvas
OSV	CVE-2025-6373	21 Jun 202500:15	–	osv
Positive Technologies	PT-2025-26477 · D Link · D-Link Dir-619L	16 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6373	23 Jun 202508:38	–	redhatcve

NVD

Node

dlink dir-619l_firmwareMatch2.06b1

AND

dlink dir-619lMatch-

[
  {
    "vendor": "D-Link",
    "product": "DIR-619L",
    "versions": [
      {
        "version": "2.06B01",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_73/73.md
vuldb	www.vuldb.com/
dlink	www.dlink.com/

Parameter	Position	Path	Description	CWE
curTime	request body	/goform/formWlSiteSurvey	Stack-based buffer overflow in formSetWizard1 via manipulation of curTime; remote exploit on /goform/formWlSiteSurvey.	CWE-119, CWE-121