CVE-2025-4343: D-Link DIR-600L formEasySetupWizard buffer overflow
Published May 6, 2025
·Updated
A vulnerability has been found in D-Link DIR-600L up to 2.07B01 and classified as critical. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
3 affected components
D-Link DIR-600L<=2.07B01
All of the following
Dlink Dir-600l Firmware<=2.07b01
Dlink Dir-600l
Event History
May 6, 2025
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4343?
CVE-2025-4343 is classified as a critical vulnerability.
2
What software is affected by CVE-2025-4343?
CVE-2025-4343 affects the D-Link DIR-600L firmware versions up to 2.07B01.
3
What is the nature of CVE-2025-4343?
CVE-2025-4343 involves a buffer overflow due to manipulation of the host argument in the function formEasySetupWizard.
4
Can CVE-2025-4343 be exploited remotely?
Yes, CVE-2025-4343 can be exploited remotely.
5
How do I fix CVE-2025-4343?
To fix CVE-2025-4343, update the D-Link DIR-600L firmware to the latest version beyond 2.07B01.