Physical Access Vulnerability in D-Link DIR-605L Router
CVE-2025-65731

Currently unrated

Key Information:

Vendor

D-Link

Vendor
CVE Published:
8 January 2026

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC

What is CVE-2025-65731?

A physical access vulnerability exists in the D-Link DIR-605L Router that can be exploited by an attacker with direct access to the UART pins. This flaw permits the execution of arbitrary commands due to unregulated root terminal access on a serial interface. Without proper access controls, this could lead to unauthorized manipulation of the router's firmware and settings, posing a significant risk to network security.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-65731 : Physical Access Vulnerability in D-Link DIR-605L Router