CVE-2025-2546mediumCWE-266CWE-284

CVE-2025-2546: falha de média gravidade em D-Link DIR-618

D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control

Publicada em

Seguir esta CVE+ Monitorar DIR-605L+ Monitorar DIR-618

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 11%
A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
D-Link · DIR-605LD-Link · DIR-618
CVEs relacionadas — D-Link DIR-618

No mesmo produto, das mais perigosas para as menos.

CVE-2025-4443MEDIUMD-Link DIR-605L sub_454F2C command injectionEPSS 62.7%CVE-2025-4445MEDIUMD-Link DIR-605L wake_on_lan command injectionEPSS 6.0%CVE-2012-10021CRITICALD-Link DIR-605L Captcha Handling Buffer OverflowEPSS 5.1%CVE-2025-4442HIGHD-Link DIR-605L formSetWAN_Wizard55 buffer overflowEPSS 2.7%CVE-2025-4441HIGHD-Link DIR-605L formSetWAN_Wizard534 buffer overflowEPSS 2.7%CVE-2024-9565HIGHD-Link DIR-605L formSetPassword buffer overflowEPSS 2.0%