PT-2025-33406 · D Link · D-Link Dir-619L

Iot_Res · Published 2025-08-14 · Updated 2025-08-15 · CVE-2025-8978

Positive Technologies · (AI Summary)

CVSS v2.0

6.8

6.8

Medium

Base vector

AV:N/AC:H/Au:M/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions:

D-Link DIR-619L version 6.02CN02

Description:

A vulnerability exists in the `FirmwareUpgrade` function of the `boa` component, leading to insufficient verification of data authenticity. The attack can be launched remotely, but is considered difficult to exploit. The exploit has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2025-8978

Affected Products

D-Link Dir-619L

References · 8

• 🔥 https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR619L.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8978 · Security Note
• https://vuldb.com/?ctiid.319974 · Note
• https://vuldb.com/?submit.628599 · Note
• https://twitter.com/CVEnew/status/1956289067374797286 · Twitter Post
• https://t.me/CVEtracker/30048 · Telegram Post
• https://dlink.com · Note
• https://vuldb.com/?id.319974 · Note