A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.
References
| Link | Resource |
|---|---|
| https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-sub_454F2C-sysCmd/README.md | Broken Link |
| https://vuldb.com/?ctiid.308051 | Permissions Required |
| https://vuldb.com/?id.308051 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.558355 | Third Party Advisory VDB Entry |
| https://www.dlink.com/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
13 May 2025, 20:23
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dlink dir-605l
Dlink dir-605l Firmware Dlink |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:* cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:* |
|
| References | () https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-sub_454F2C-sysCmd/README.md - Broken Link | |
| References | () https://www.dlink.com/ - Product | |
| References | () https://vuldb.com/?submit.558355 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.308051 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.308051 - Permissions Required |
09 May 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-09 00:15
Updated : 2025-05-13 20:23
NVD link : CVE-2025-4443
Mitre link : CVE-2025-4443
JSON object : View
Products Affected
dlink
- dir-605l
- dir-605l_firmware