PT-2025-12344 · D Link · D-Link Dir-618 +1

Yhryhryhr

·

Published

2025-03-20

·

Updated

2025-07-14

·

CVE-2025-2552

CVSS v2.0
3.3
VectorAV:A/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions D-Link DIR-618 versions 2.02/3.02 D-Link DIR-605L versions 2.02/3.02
Description A vulnerability was found that affects the file /goform/formTcpipSetup, leading to improper access controls. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. This issue only affects products that are no longer supported by the maintainer.
Recommendations For D-Link DIR-618 versions 2.02/3.02, consider restricting access to the /goform/formTcpipSetup file to minimize the risk of exploitation. For D-Link DIR-605L versions 2.02/3.02, consider restricting access to the /goform/formTcpipSetup file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Improper Access Control

Weakness Enumeration

CWE-266CWE-284

Related Identifiers

BDU:2025-05470
CVE-2025-2552

Affected Products

D-Link Dir-605L
D-Link Dir-618