A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this issue is the function formEasySetupWizard3. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.
References
| Link | Resource |
|---|---|
| https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Buffer_overflow-formEasySetupWizard3-wan_connected/README.md | Broken Link |
| https://vuldb.com/?ctiid.307460 | Permissions Required VDB Entry |
| https://vuldb.com/?id.307460 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.558295 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
13 May 2025, 20:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dlink:dir-600l_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:dlink:dir-600l:-:*:*:*:*:*:*:* |
|
| First Time |
Dlink dir-600l
Dlink dir-600l Firmware Dlink |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://vuldb.com/?id.307460 - Third Party Advisory, VDB Entry | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Buffer_overflow-formEasySetupWizard3-wan_connected/README.md - Broken Link | |
| References | () https://vuldb.com/?ctiid.307460 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.558295 - Third Party Advisory, VDB Entry |
06 May 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-06 09:15
Updated : 2025-05-13 20:25
NVD link : CVE-2025-4342
Mitre link : CVE-2025-4342
JSON object : View
Products Affected
dlink
- dir-600l
- dir-600l_firmware