CVE-2025-2553 — Incorrect Privilege Assignment in D-link Dir-605l

CWE-266 — Incorrect Privilege AssignmentCWE-284 — Improper Access ControlCWE-287 — Improper Authentication5 documents5 sources
Severity
5.3MEDIUMNVD
EPSS
0.6%
top 30.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
D-link Dir-605lD-link Dir-618Dlink Dir-605l Firmware+1 more
Timeline
PublishedMar 20
Latest updateApr 16

Description

A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages4 packages

▶CVEListV5d-link/dir-605l2.02, 3.02+1
▶CVEListV5d-link/dir-6182.02, 3.02+1

🔴Vulnerability Details

2
CVEList
D-Link DIR-618/DIR-605L formVirtualServ access control↗2025-03-20
▶
GHSA
GHSA-9fcc-m4p7-2rp9: A vulnerability was found in D-Link DIR-618 and DIR-605L 2↗2025-03-20
▶

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS D-Link DIR-605L/DIR-618 Multiple Authentication Bypass URI Endpoints (CVE-2025-2546 - CVE-2025-2553)↗2025-04-16
▶

📋Vendor Advisories

1
Microsoft
The authfile directive in the booth config file is ignored preventing use of authentication in communications from node to node. As a result nodes that do not have the correct authentication key are n↗2022-07-12
▶
CVE-2025-2553 — Incorrect Privilege Assignment | cvebase