CVE-2025-6369

D-Link DIR-619L formdumpeasysetup stack-based overflow

HIGH 7.4EPSS 1.2%

A vulnerability classified as critical has been found in D-Link DIR-619L 2.06B01. Affected is the function formdumpeasysetup of the file /goform/formdumpeasysetup. The manipulation of the argument curTime/config.save_network_enabled leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Es wurde eine kritische Schwachstelle in D-Link DIR-619L 2.06B01 entdeckt. Es geht dabei um die Funktion formdumpeasysetup der Datei /goform/formdumpeasysetup. Mittels dem Manipulieren des Arguments curTime/config.save_network_enabled mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung.

Affected: D-Link · DIR-619L
CVSS v4.0 VULDB: 7.4 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 VULDB: 9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS: 1.19% chance of exploitation in the next 30 days, 68th percentile
Published: 2025-06-20
Updated: 2025-06-23

Proof-of-concept exploits (1)

wudipjq/my_vuln/blob/main/D-Link6/vuln_69/69.md27★ · 2026-09-15

CVE-2025-6369

Proof-of-concept exploits (1)

Security advisories

References