CVE-2025-4449: D-Link DIR-619L formEasySetupWizard3 buffer overflow
A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wanconnected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4449?
The severity of CVE-2025-4449 is classified as critical.
What type of vulnerability is CVE-2025-4449?
CVE-2025-4449 is a buffer overflow vulnerability found in the D-Link DIR-619L.
Who is affected by CVE-2025-4449?
CVE-2025-4449 affects users of the D-Link DIR-619L running version 2.04B04.
How can CVE-2025-4449 be exploited?
CVE-2025-4449 can be exploited remotely by manipulating the wan_connected argument.
How do I fix CVE-2025-4449?
To fix CVE-2025-4449, update the D-Link DIR-619L firmware to the latest version provided by the vendor.