CVE-2025-6615

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formAutoDetecWAN_wizard4 of the file /goform/formAutoDetecWAN_wizard4. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
References
Link Resource
https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_76/76.md Exploit Third Party Advisory
https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_76/76.md#poc Exploit Third Party Advisory
https://vuldb.com/?ctiid.313833 Permissions Required VDB Entry
https://vuldb.com/?id.313833 Third Party Advisory VDB Entry
https://vuldb.com/?submit.602258 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*

History

14 Jul 2025, 17:18

Type Values Removed Values Added
CPE cpe:2.3:h:dlink:dir-619l:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:*:*:*:*:*:*:*
First Time Dlink dir-619l
Dlink
Dlink dir-619l Firmware
References () https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_76/76.md - () https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_76/76.md - Exploit, Third Party Advisory
References () https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_76/76.md#poc - () https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_76/76.md#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.313833 - () https://vuldb.com/?ctiid.313833 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.313833 - () https://vuldb.com/?id.313833 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.602258 - () https://vuldb.com/?submit.602258 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product

26 Jun 2025, 18:57

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad clasificada como crítica en D-Link DIR-619L 2.06B01. Esta afecta a la función formAutoDetecWAN_wizard4 del archivo /goform/formAutoDetecWAN_wizard4. La manipulación del argumento curTime provoca un desbordamiento del búfer en la pila. Es posible iniciar el ataque en remoto. Se ha hecho público el exploit y puede que sea utilizado. Esta vulnerabilidad solo afecta a los productos que ya no reciben soporte del fabricante.

25 Jun 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-25 16:15

Updated : 2025-07-14 17:18


NVD link : CVE-2025-6615

Mitre link : CVE-2025-6615

CVE.ORG link : CVE-2025-6615


JSON object : View

Products Affected

dlink

  • dir-619l_firmware
  • dir-619l
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121

Stack-based Buffer Overflow