CVE-2025-6371: A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The...

Summary

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launched ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
dlink	dir-619l_firmware	2.06b1 `cpe:2.3:o:dlink:dir-619l_firmware:2.06b1:::::::*`

Original advisory text

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The...

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

References

https://vuldb.com/?ctiid.313364 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.313364 Third Party Advisory VDB Entry
https://vuldb.com/?submit.597424 Third Party Advisory VDB Entry
https://www.dlink.com/ Product
https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_71/71.md Exploit Third Party Advisory