Buffer Overflow Vulnerability in D-Link DIR-619L Router Software
CVE-2025-4449

8.7HIGH

Key Information:

Vendor

D-link
Status
Dir-619l
Vendor
CVE Published:
9 May 2025

What is CVE-2025-4449?

A buffer overflow vulnerability exists in the D-Link DIR-619L router's Easy Setup Wizard function. Exploiting this vulnerability involves manipulating the 'wan_connected' argument, which can be done remotely. This issue affects users of the affected version who may be exposed as the product is no longer supported by the vendor. Immediate action is recommended to mitigate potential risks.

Affected Version(s)

DIR-619L 2.04B04

References

https://vuldb.com/?id.308063
vdb-entrytechnical-description
https://vuldb.com/?ctiid.308063
signaturepermissions-required
https://vuldb.com/?submit.558358
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

jylsec (VulDB User)
.
CVE-2025-4449 : Buffer Overflow Vulnerability in D-Link DIR-619L Router Software