CVE-2025-2551: D-Link DIR-618/DIR-605L formSetPortTr access control
First published: Thu Mar 20 2025(Updated: )
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DIR-618 | >=2.02<3.02 | |
| D-Link DIR-605L Firmware | >=2.02<3.02 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.300165
- https://vuldb.com/?ctiid.300165
- https://vuldb.com/?submit.516793
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetPortTr-1b053a41781f8000a9ded17aa2f587cc?pvs=4
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetPortTr-1b153a41781f809d95c8e39c6c31c348?pvs=4
- https://www.dlink.com/
Frequently Asked Questions
What is the severity of CVE-2025-2551?
CVE-2025-2551 has been classified as a problematic vulnerability that affects D-Link DIR-618 and DIR-605L routers.
What type of vulnerability is CVE-2025-2551?
CVE-2025-2551 is an improper access control vulnerability found in the file /goform/formSetPortTr.
How do I fix CVE-2025-2551?
To fix CVE-2025-2551, update your D-Link DIR-618 or DIR-605L router to the latest firmware version beyond 3.02.
What are the affected devices for CVE-2025-2551?
CVE-2025-2551 affects the D-Link DIR-618 and DIR-605L routers running firmware between versions 2.02 and 3.02.
What are the requirements to exploit CVE-2025-2551?
Exploitation of CVE-2025-2551 requires access to the local network.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/source
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/d-link
- canonical/d-link dir-618
- canonical/d-link dir-605l firmware