PT-2025-19936 · D Link · D-Link Dir-600

B1Nn · Published 2025-05-06 · Updated 2025-05-06 · CVE-2025-4346

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-600L versions 2.07B01 and earlier

Description A critical issue has been identified, affecting the function formSetWAN Wizard534. The manipulation of the argument host leads to a buffer overflow, allowing for remote attack execution. This issue only affects products that are no longer supported by the manufacturer.

Recommendations For D-Link DIR-600L versions 2.07B01 and earlier, as a temporary workaround, consider disabling the formSetWAN Wizard534 function until a patch is available. Restrict access to the affected function to minimize the risk of exploitation. Avoid using the host argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2025-05487

CVE-2025-4346

Affected Products

D-Link Dir-600

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2025-4346 · Security Note
• https://bdu.fstec.ru/vul/2025-05487 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4346 · Vendor Advisory
• https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Buffer_overflow-formSetWAN_Wizard534-curTime/README.md · Note
• https://t.me/cvedetector/24598 · Telegram Post
• https://vuldb.com/?submit.558299 · Note
• https://twitter.com/CVEnew/status/1919703980776509455 · Twitter Post
• https://twitter.com/cybercronai/status/1919861067821248679 · Twitter Post
• https://t.me/cvetracker/23158 · Telegram Post
• https://vuldb.com/?ctiid.307464 · Note
• https://twitter.com/CveFindCom/status/1919701777563197827 · Twitter Post
• https://t.me/cvenotify/120956 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1919822302914478321 · Twitter Post
• https://vuldb.com/?id.307464 · Note
• https://dlink.com · Note