CVE-2025-2547

CVE-2025-2547 (D-Link DIR-618/DIR-605L) affects DIR-618 (2.02) and DIR-605L (2.02/3.02) due to an improper access control in the file /goform/formAdvNetwork. The issue permits exploitation from the local network and is described as a vulnerability in access control that can enable a related impac...

CVE-2025-2551

CVE-2025-2551 affects D-Link DIR-618 and DIR-605L (firmware versions 2.02/3.02). The vulnerability is an Access Control Error in the file /goform/formSetPortTr, enabling improper access controls and requiring local-network access to exploit. Multiple sources consistently describe impact as exposu...

CVE-2025-2548

CVE-2025-2548 affects D-Link DIR-618 and DIR-605L (firmware versions 2.02/3.02) with an access-control error in the file /goform/formSetDomainFilter. The root cause is improper access controls on that endpoint, enabling local-network attackers to manipulate settings. Multiple sources (NVD, CNVD, ...

CVE-2025-2546

D-Link DIR-618 (2.02) and DIR-605L (2.02/3.02) are affected by an access-control vulnerability in the Firewall Service, specifically in the /goform/formAdvFirewall endpoint. The root cause is improper access controls for this file, enabling local-network attackers to manipulate firewall/DMZ setti...

CVE-2025-2552

CVE-2025-2552 affects D-Link DIR-618 (2.02/3.02) and DIR-605L (2.02/3.02). Root cause: improper access control in the file /goform/formTcpipSetup, enabling an attacker on the local network to manipulate the device’s tcpip service. Exploitation is possible with adjacent-network access and no user ...

CVE-2025-2549

CVE-2025-2549 affects D-Link DIR-618 (firmware 2.02) and DIR-605L (firmware 3.02). The issue is an access-control error in the file /goform/formSetPassword that lets an attacker set a device password. Attack requires local network access; the vulnerability affects devices no longer supported by t...

CVE-2025-2550

CVE-2025-2550 affects D-Link DIR-618 and DIR-605L (versions 2.02/3.02). The vulnerability is an access-control flaw in the DDNS service endpoint /goform/formSetDDNS, enabling improper access within the local network. Multiple sources (NVD, CNVD/CNNVD, Red Hat) describe the issue as an access-cont...

CVE-2025-2553

Affected products: D-Link DIR-618 and DIR-605L (firmware 2.02/3.02). Issue: Access control error in the /goform/formVirtualServ handling, caused by improper access controls. Impact: local-network exposure risk due to manipulation of virtual services. Exploitability: exploit publicly disclosed; pr...