CVE-2025-4454: D-Link DIR-619L wake_on_lan command injection
A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wakeonlan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4454?
CVE-2025-4454 is declared as critical due to its potential for remote command injection.
How do I fix CVE-2025-4454?
To fix CVE-2025-4454, update the D-Link DIR-619L firmware to the latest version provided by the vendor.
What type of attack is possible with CVE-2025-4454?
CVE-2025-4454 allows for a remote command injection attack through manipulation of the wake_on_lan function.
Which devices are affected by CVE-2025-4454?
CVE-2025-4454 specifically affects the D-Link DIR-619L router.
Is remote exploitation possible with CVE-2025-4454?
Yes, CVE-2025-4454 can be exploited remotely, making it a significant security risk.