CVE-2025-2552: D-Link DIR-618/DIR-605L formTcpipSetup access control
First published: Thu Mar 20 2025(Updated: )
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| D-Link DIR-618 | ||
| D-Link DIR-605L Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.300166
- https://vuldb.com/?ctiid.300166
- https://vuldb.com/?submit.516794
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formTcpipSetup-1b053a41781f80fbbf94fda0c3b5ebfa?pvs=4
- https://lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formTcpipSetup-1b153a41781f80a7967ae08c81147a39?pvs=4
- https://www.dlink.com/
Frequently Asked Questions
What is the severity of CVE-2025-2552?
CVE-2025-2552 has been classified as a problematic vulnerability with significant implications for improper access controls.
How do I fix CVE-2025-2552?
To mitigate CVE-2025-2552, ensure that your D-Link DIR-618 or DIR-605L router firmware is updated to the latest version provided by D-Link.
What are the affected devices for CVE-2025-2552?
CVE-2025-2552 affects D-Link DIR-618 and DIR-605L router models running specific firmware versions 2.02 and 3.02.
What potential impact does CVE-2025-2552 have?
CVE-2025-2552 can allow unauthorized access to the device due to improper access controls, potentially leading to local network exposure.
Is remote exploitation possible with CVE-2025-2552?
CVE-2025-2552 requires local network access for exploitation, limiting its impact compared to remote vulnerabilities.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/source
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/d-link
- canonical/d-link dir-618
- canonical/d-link dir-605l firmware