CVE-2025-4350: D-Link DIR-600L wake_on_lan command injection
Published May 6, 2025
·Updated
A vulnerability classified as critical was found in D-Link DIR-600L up to 2.07B01. This vulnerability affects the function wakeonlan. The manipulation of the argument host leads to command injection. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
3 affected components
D-Link DIR-600L<=2.07B01
All of the following
Dlink Dir-600l Firmware<=2.07b01
Dlink Dir-600l
Event History
May 6, 2025
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Jun 14, 57318
Event
via FIRST·11:59 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-4350?
CVE-2025-4350 is classified as a critical vulnerability.
2
How do I fix CVE-2025-4350?
To fix CVE-2025-4350, update the D-Link DIR-600L to a version beyond 2.07B01.
3
What type of vulnerability is CVE-2025-4350?
CVE-2025-4350 is a command injection vulnerability affecting the wake_on_lan function.
4
Can CVE-2025-4350 be exploited remotely?
Yes, CVE-2025-4350 can be exploited remotely.
5
What devices are affected by CVE-2025-4350?
CVE-2025-4350 affects the D-Link DIR-600L router with firmware versions up to 2.07B01.