PT-2025-12338 · D Link · D-Link Dir-605L+1

Yhryhryhr_Tu · Published 2025-03-20 · Updated 2025-07-15 · CVE-2025-2546

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions D-Link DIR-618 version 2.02/3.02 D-Link DIR-605L version 2.02/3.02

Description A problematic vulnerability was found in the Firewall Service component, affecting the /goform/formAdvFirewall file. This issue leads to improper access controls, requiring an attack to be launched within the local network. The exploit has been publicly disclosed. This vulnerability only affects products that are no longer supported by the maintainer.

Recommendations For D-Link DIR-618 version 2.02/3.02, as a temporary workaround, consider restricting access to the /goform/formAdvFirewall endpoint of the Firewall Service until a patch is available. For D-Link DIR-605L version 2.02/3.02, as a temporary workaround, consider restricting access to the /goform/formAdvFirewall endpoint of the Firewall Service until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

BDU:2025-05466

CVE-2025-2546

Affected Products

D-Link Dir-605L

D-Link Dir-618

References · 15

• 🔥 https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvFirewall-1b153a41781f80aca28ec11da787f0e8?pvs=4 · Exploit
• 🔥 https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formAdvFirewall-1b053a41781f801ca1a5e09bb83a22c5?pvs=4 · Exploit
• https://bdu.fstec.ru/vul/2025-05466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2546 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2546 · Vendor Advisory
• https://twitter.com/CVEnew/status/1902968829908816195 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1902662030776996348 · Twitter Post
• https://vuldb.com/?ctiid.300160 · Note
• https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formAdvFirewall-1b053a41781f801ca1a5e09bb83a22c5 · Note
• https://vuldb.com/?id.300160 · Note
• https://t.me/cvenotify/129072 · Telegram Post
• https://t.me/cvedetector/20738 · Telegram Post
• https://t.me/cvetracker/19548 · Telegram Post
• https://vuldb.com/?submit.516788 · Note
• https://dlink.com · Note