CVE-2025-4450

CWE-119 — Buffer Overflow CWE-120 — Classic Buffer Overflow CWE-4154 documents4 sources

Severity

8.7HIGH

EPSS

0.9%

top 23.91%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

D-link Dir-619l Dlink Dir-619l Firmware

Timeline

PublishedMay 9

Description

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/dir-619l2.04B04

▶NVDdlink/dir-619l_firmware2.04b04

🔴Vulnerability Details

GHSA

GHSA-m5vp-hqc5-ggg7: A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2↗2025-05-09

▶

CVEList

D-Link DIR-619L formSetEasy_Wizard buffer overflow↗2025-05-09

▶

📋Vendor Advisories

Microsoft

Double free after calling PEM_read_bio_ex↗2023-02-14

▶