PT-2025-20457 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue affects the wake on lan function, where manipulation of the mac argument leads to command injection. This can be initiated remotely. The vendor was contacted about this disclosure...

PT-2025-20440 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue affects the function sub 454F2C, where the manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. This issue only affects products th...

PT-2025-20439 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue affects the formSetWAN Wizard55 function, where manipulation of the curTime argument leads to a buffer overflow. This can be initiated remotely. The vendor was contacted about this...

CVE-2025-44023

An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the accountmgr.cgi-cgichgadminpw components...

PT-2025-20414 · D Link · Dns-320L +1

Name of the Vulnerable Software and Affected Versions: dlink DNS-320 version 1.00 dlink DNS-320LW version 1.01.0914.20212 Description: An issue allows an attacker to execute arbitrary code via the account mgr.cgi component, specifically through the cgi chg admin pw function. Recommendations: For...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a buffer overflow vulnerability that stems from the formSetWANWizard55 function parameter curTime failing to correctly validate the length and size of the input data, which can be exploited by an...

PT-2025-20451 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical vulnerability has been found in the function formSetWAN Wizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. This vulnerabili...

D-Link DNS-320 安全漏洞

D-Link DNS-320 is a NAS Network Attached Storage device from China AUO D-Link. A security vulnerability exists in D-Link DNS-320 version v1.00 and DNS-320LW version v1.01.0914.20212, which stems from a flaw in the accountmgr.cgi - cgichgadminpw component that could lead to the execution of...

PT-2025-20448 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue was found in the formEasySetupWizard function, where the manipulation of the curTime argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

PT-2025-20449 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue has been found in the function formEasySetupWizard3, where the manipulation of the argument wan connected leads to a buffer overflow. This issue can be exploited remotely. The vend...

PT-2025-20450 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue was found in the function formSetEasy Wizard, where the manipulation of the argument curTime leads to a buffer overflow. This issue can be exploited remotely. The vendor was notifi...

CVE-2025-4349

A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability only affects products that are no long...

CVE-2025-4350

A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wakeonlan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer...

CVE-2025-4350

A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wakeonlan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer...

CVE-2025-4350

CVE-2025-4350 : D-Link DIR-600L devices up to firmware 2.07B01 are affected by a remote command-injection in the wake_on_lan function, via manipulation of the host argument. This can lead to arbitrary command execution and occurs on a device family that is no longer maintained. Relevant sources d...

CVE-2025-4350 D-Link DIR-600L wake_on_lan command injection

A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wakeonlan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer...

CVE-2025-4350 D-Link DIR-600L wake_on_lan command injection

A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wakeonlan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer...

CVE-2025-4349 D-Link DIR-600L formSysCmd command injection

A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability only affects products that are no long...

CVE-2025-4349

The CVE-2025-4349 entry concerns D-Link DIR-600L devices. Affects the function formSysCmd, where the host argument can be manipulated to achieve command injection. Exploitation is described as remote and feasible on firmware versions up to 2.07B01, and the vulnerability impacts devices that are n...

CVE-2025-4349 D-Link DIR-600L formSysCmd command injection

A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability only affects products that are no long...