CVE-2025-2550: D-Link DIR-618/DIR-605L DDNS Service formSetDDNS access control
First published: Thu Mar 20 2025(Updated: )
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DIR-618 | ||
| D-Link DIR-605L Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.300164
- https://vuldb.com/?ctiid.300164
- https://vuldb.com/?submit.516792
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetDDNS-1b053a41781f80659702da9a589e4f4a?pvs=4
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetDDNS-1b153a41781f80feb80bd24afc8f83d5?pvs=4
- https://www.dlink.com/
Frequently Asked Questions
What is the severity of CVE-2025-2550?
CVE-2025-2550 is classified as a problematic vulnerability due to improper access controls.
How do I fix CVE-2025-2550?
To fix CVE-2025-2550, it's recommended to update your D-Link DIR-618 or DIR-605L firmware to the latest secure version.
What are the affected products for CVE-2025-2550?
CVE-2025-2550 affects the D-Link DIR-618 and DIR-605L routers.
What kind of attacks does CVE-2025-2550 allow?
CVE-2025-2550 allows attackers to manipulate improper access controls, potentially leading to unauthorized access.
Who is affected by CVE-2025-2550?
Users of the D-Link DIR-618 and DIR-605L routers with the mentioned firmware versions are affected by CVE-2025-2550.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/source
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/d-link
- canonical/d-link dir-618
- canonical/d-link dir-605l firmware