CVE-2025-4442: D-Link DIR-605L formSetWAN_Wizard55 buffer overflow
A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWANWizard55. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4442?
CVE-2025-4442 is declared as critical due to the potential for remote exploitation.
What is the impact of CVE-2025-4442 on affected systems?
CVE-2025-4442 can lead to a buffer overflow, compromising the security of the D-Link DIR-605L router.
How can I fix CVE-2025-4442?
To mitigate CVE-2025-4442, update the firmware of the D-Link DIR-605L to the latest version provided by D-Link.
Who is affected by CVE-2025-4442?
CVE-2025-4442 affects users of the D-Link DIR-605L router running version 2.13B01.
Can CVE-2025-4442 be exploited remotely?
Yes, CVE-2025-4442 can be exploited remotely, allowing attackers to manipulate vulnerable functions.