PT-2025-19933 · D Link · D-Link Dir-600
B1Nn
·
Publicado
2025-05-06
·
Atualizado
2025-05-14
·
CVE-2025-4343
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
D-Link DIR-600L versions 2.07B01 and earlier
Description
A critical issue has been identified that affects the
formEasySetupWizard function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. It is noted that this issue only affects products that are no longer supported by the manufacturer.Recommendations
For D-Link DIR-600L versions 2.07B01 and earlier, as a temporary workaround, consider disabling the
formEasySetupWizard function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. Avoid using the host argument in the affected setup wizard until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
D-Link Dir-600