Buffer Overflow Vulnerability in D-Link DIR-619L Router
CVE-2025-4452

8.7HIGH

Key Information:

Vendor

D-link
Status
Dir-619l
Vendor
CVE Published:
9 May 2025

What is CVE-2025-4452?

A vulnerability exists in the D-Link DIR-619L router, specifically in the formSetWizard2 function, where improper handling of the curTime argument can lead to a buffer overflow. This vulnerability can be exploited remotely, allowing an attacker to potentially execute arbitrary code or manipulate the device's operation. It is significant to note that this issue affects devices that are no longer supported by the vendor, pointing to the crucial need for users to maintain updated firmware or consider replacing old hardware to safeguard their network.

Affected Version(s)

DIR-619L 2.04B04

References

https://vuldb.com/?id.308066
vdb-entrytechnical-description
https://vuldb.com/?ctiid.308066
signaturepermissions-required
https://vuldb.com/?submit.560795
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

zjy148909 (VulDB User)
.