Dlink Dir-619L Firmware vulnerabilities

CVE-2014-8361 [CRITICAL] CVE-2014-8361: The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a craf The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.

CVE-2025-4453 [CRITICAL] CWE-74 CVE-2025-4453: A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affec A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no l

CVE-2023-37791 [CRITICAL] CWE-787 CVE-2023-37791: D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /g D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin.

CVE-2025-4454 [CRITICAL] CWE-74 CVE-2025-4454: A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnera A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no l

CVE-2025-6616 [HIGH] CWE-119 CVE-2025-6616: A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerabi A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWAN_Wizard51 of the file /goform/formSetWAN_Wizard51. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and ma

CVE-2025-6373 [HIGH] CWE-119 CVE-2025-6373: A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerabi A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWizard1 of the file /goform/formWlSiteSurvey. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be use

CVE-2025-6114 [HIGH] CWE-119 CVE-2025-6114: A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by th A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is the function form_portforwarding of the file /goform/form_portforwarding. The manipulation of the argument ingress_name_%d/sched_name_%d/name_%d leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has

CVE-2025-6615 [HIGH] CWE-119 CVE-2025-6615: A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affect A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formAutoDetecWAN_wizard4 of the file /goform/formAutoDetecWAN_wizard4. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ

CVE-2025-6372 [HIGH] CWE-119 CVE-2025-6372: A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affect A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formSetWizard1 of the file /goform/formSetWizard1. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4449 [CRITICAL] CWE-119 CVE-2025-4449: A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This i A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wan_connected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects produc

CVE-2025-4450 [CRITICAL] CWE-119 CVE-2025-4450: A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are

CVE-2024-9566 [HIGH] CWE-120 CVE-2024-9566: A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. This vulnerability affe A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. This vulnerability affects the function formDeviceReboot of the file /goform/formDeviceReboot. The manipulation of the argument next_page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9911 [HIGH] CWE-120 CVE-2024-9911: A vulnerability was found in D-Link DIR-619L B1 2.06. It has been classified as critical. This affec A vulnerability was found in D-Link DIR-619L B1 2.06. It has been classified as critical. This affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-6370 [HIGH] CWE-119 CVE-2025-6370: A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulner A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the function formWlanGuestSetup of the file /goform/formWlanGuestSetup. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be

CVE-2025-6368 [HIGH] CWE-119 CVE-2025-6368: A vulnerability was found in D-Link DIR-619L 2.06B01. It has been rated as critical. This issue affe A vulnerability was found in D-Link DIR-619L 2.06B01. It has been rated as critical. This issue affects the function formSetEmail of the file /goform/formSetEmail. The manipulation of the argument curTime/config.smtp_email_subject leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and

CVE-2025-6374 [HIGH] CWE-119 CVE-2025-6374: A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formSetACLFilter of the file /goform/formSetACLFilter. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vuln

CVE-2025-6617 [HIGH] CWE-119 CVE-2025-6617: A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vuln

CVE-2024-9570 [HIGH] CWE-120 CVE-2024-9570: A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this is A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formEasySetTimezone of the file /goform/formEasySetTimezone. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9915 [HIGH] CWE-120 CVE-2024-9915: A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulner A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-9913 [HIGH] CWE-120 CVE-2024-9913: A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affe A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.