CVE-2025-4445

CVE-2025-4445 affects D-Link DIR-605L firmware 2.13B01, where the wake_on_lan function takes a mac argument that can be manipulated to trigger command injection. The vulnerability enables remote code execution over the network and is described across multiple sources (NVD, CNVD, Red Hat, CIRCL) w...

D-Link DIR-619L security vulnerabilities

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWizard2 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...

D-Link DIR-619L security vulnerabilities

The D-Link DIR-619L is a cost-effective wireless router designed for home office Internet needs. The D-Link DIR-619L suffers from a buffer overflow vulnerability that stems from the improper handling of the wanconnected parameter in the formEasySetupWizard3 function, which can be exploited by an...

D-Link DIR-619L has a vulnerability regarding injection

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...

D-Link DIR-619L security vulnerabilities

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the curTime parameter of the formEasySetupWizard function failing to properly validate the length of the input data, which can be exploited by an...

D-Link DIR-619L has a vulnerability regarding injection

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the formSysCmd function sysCmd parameter failing to properly filter construct command special characters, commands, etc. No details of the...

CVE-2025-4452: Buffer Copy without Checking Size of Input

A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure. Thi...

CVE-2025-4449: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wanconnected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about th...

CVE-2025-4451: Buffer Copy without Checking Size of Input

A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWANWizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about thi...

CVE-2025-4450: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasyWizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosur...

CVE-2025-4445: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wakeonlan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This...

CVE-2025-4442: Buffer Copy without Checking Size of Input

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWANWizard55. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this...

CVE-2025-4454: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wakeonlan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2025-4453: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure...

CVE-2025-4448: Buffer Copy without Checking Size of Input

A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2025-4443: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This...

CVE-2025-4443

The CVE-2025-4443 entry concerns D-Link DIR-605L firmware (2.13B01) with a command-injection in the sysCmd parameter of the function sub_454F2C. The root cause is improper handling/validation of the sysCmd argument, enabling remote command execution. Impact is high for affected devices, with pote...

CVE-2025-4443 D-Link DIR-605L sub_454F2C command injection

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This...

CVE-2025-4442

D-Link DIR-605L (firmware 2.13B01) is affected by CVE-2025-4442 in the formSetWAN_Wizard55 function, where improper validation of the curTime parameter causes a buffer overflow. This remote, unauthenticated vulnerability can lead to arbitrary code execution or crash. Several sources confirm the i...

CVE-2025-4442 D-Link DIR-605L formSetWAN_Wizard55 buffer overflow

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWANWizard55. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this...