PT-2025-33406 · D Link · D-Link Dir-619L

Iot_Res · Published 2025-06-22 · Updated 2025-09-12 · CVE-2025-8978

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 6.02CN02

Description: A vulnerability exists in the FirmwareUpgrade function of the boa component, leading to insufficient verification of data authenticity. The attack can be launched remotely, but is considered difficult to exploit. The exploit has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

BDU:2025-10681

CVE-2025-8978

Affected Products

D-Link Dir-619L

References · 13

• 🔥 https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR619L.md · Exploit
• https://bdu.fstec.ru/vul/2025-10681 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8978 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8978 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-8978 · Security Note
• https://vuldb.com/?submit.628599 · Note
• https://t.me/cveNotify/135274 · Telegram Post
• https://securityvulnerability.io/vulnerability/CVE-2025-8978 · Note
• https://twitter.com/CVEnew/status/1956289067374797286 · Twitter Post
• https://vuldb.com/?id.319974 · Note
• https://dlink.com · Note
• https://t.me/CVEtracker/30048 · Telegram Post
• https://vuldb.com/?ctiid.319974 · Note