CVE-2025-4443

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*

History

13 May 2025, 20:23

Type Values Removed Values Added
CPE cpe:2.3:h:dlink:dir-605l:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-605l_firmware:2.13b01:*:*:*:*:*:*:*
References () https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-sub_454F2C-sysCmd/README.md - () https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-sub_454F2C-sysCmd/README.md - Broken Link
References () https://vuldb.com/?ctiid.308051 - () https://vuldb.com/?ctiid.308051 - Permissions Required
References () https://vuldb.com/?id.308051 - () https://vuldb.com/?id.308051 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.558355 - () https://vuldb.com/?submit.558355 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
First Time Dlink
Dlink dir-605l
Dlink dir-605l Firmware

12 May 2025, 17:32

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en D-Link DIR-605L 2.13B01. Se ha clasificado como crítica. Este problema afecta a la función sub_454F2C. La manipulación del argumento sysCmd provoca la inyección de comandos. El ataque puede ejecutarse en remoto. Se contactó al proveedor con antelación para informarle sobre esta vulnerabilidad. Esta vulnerabilidad solo afecta a los productos que ya no reciben soporte del fabricante.

09 May 2025, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-09 00:15

Updated : 2025-05-13 20:23


NVD link : CVE-2025-4443

Mitre link : CVE-2025-4443

CVE.ORG link : CVE-2025-4443


JSON object : View

Products Affected

dlink

  • dir-605l
  • dir-605l_firmware
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')