CVE-2025-4349: D-Link DIR-600L formSysCmd command injection
A vulnerability classified as critical has been found in D-Link DIR-600L up to 2.07B01. This affects the function formSysCmd. The manipulation of the argument host leads to command injection. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4349?
CVE-2025-4349 is classified as a critical vulnerability.
How do I fix CVE-2025-4349?
To mitigate CVE-2025-4349, update the D-Link DIR-600L firmware to the latest version beyond 2.07B01.
What is the impact of CVE-2025-4349?
CVE-2025-4349 allows for remote command injection due to improper handling of the argument host.
Which devices are affected by CVE-2025-4349?
CVE-2025-4349 affects D-Link DIR-600L devices running firmware version up to 2.07B01.
Is CVE-2025-4349 exploitable over the internet?
Yes, CVE-2025-4349 can be exploited remotely, making it critical for internet-connected devices.