PT-2025-20450 · D Link · D-Link Dir-619L

Zjy148909

·

Published

2025-05-08

·

Updated

2025-05-14

·

CVE-2025-4450

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions D-Link DIR-619L version 2.04B04
Description A critical issue was found in the function formSetEasy Wizard, where the manipulation of the argument curTime leads to a buffer overflow. This issue can be exploited remotely. The vendor was notified about this issue, and it only affects products that are no longer supported by the maintainer.
Recommendations For D-Link DIR-619L version 2.04B04, as a temporary workaround, consider disabling the formSetEasy Wizard function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. Avoid using the argument curTime in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119CWE-120

Related Identifiers

BDU:2025-05496
CVE-2025-4450

Affected Products

D-Link Dir-619L