CVE Feed

    Dashboard / CVE / CVE-2025-2546

    CVE-2025-2546

    A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

    Published:Mar 20, 2025
    Last Modified:Jul 15, 2025
    EPS:Mar 20, 2025
    EPSS Score:0.00251
    CVSS Score:4.3

    Affected Products

    Vendor
    Dlink
    Product
    Dir-605l
    Vendor
    Dlink
    Product
    Dir-605l Firmware
    Vendor
    Dlink
    Product
    Dir-618
    Vendor
    Dlink
    Product
    Dir-618 Firmware

    Exploits

    https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formAdvFirewall-1b153a41781f80aca28ec11da787f0e8?pvs=4https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formAdvFirewall-1b053a41781f801ca1a5e09bb83a22c5?pvs=4

    Related CVEs

    CVE-2026-42373 (CVSS 9.8) — D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device start…
    CVE-2026-42372 (CVSS 8.8) — D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor. The device start…
    CVE-2026-5984 (CVSS 7.4) — A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /go…
    CVE-2026-5983 (CVSS 7.4) — A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the …
    CVE-2026-5982 (CVSS 7.4) — A vulnerability was found in D-Link DIR-605L 2.13B01. This vulnerability affects the function formAdvNetwork o…
    CVE-2026-5981 (CVSS 7.4) — A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the fi…
    CVE-2026-5980 (CVSS 7.4) — A flaw has been found in D-Link DIR-605L 2.13B01. Affected by this issue is the function formSetMACFilter of t…
    CVE-2026-5979 (CVSS 7.4) — A vulnerability was detected in D-Link DIR-605L 2.13B01. Affected by this vulnerability is the function formVi…
    CVE-2026-2056 (CVSS 5.5) — A security vulnerability has been detected in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The impacted eleme…
    CVE-2026-2055 (CVSS 5.5) — A weakness has been identified in D-Link DIR-605L and DIR-619L 2.06B01/2.13B01. The affected element is an unk…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High