CVE-2025-2549: d-link dir-605l_firmware Incorrect Privilege Assignment

EPSS trend

Probability

1.03%

Chance of exploitation in the next 30 days

Percentile

63%

Versus all other CVEs

30-day change

+0.02 pp

From 1.01% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.03%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (lavender-bicycle-a5a.notion.site)
Maturity: unknown
referenceUnverified
Exploit Reference (lavender-bicycle-a5a.notion.site)
Maturity: unknown

References

6 links

vuldb.com?id.300163VDB EntryThird Party Advisory
vuldb.com?ctiid.300163SignaturePermissions RequiredVDB Entry
vuldb.com?submit.516791Third Party AdvisoryVDB Entry
lavender-bicycle-a5a.notion.site/D-Link-DIR-618-formSetPassword-1b053a41781f8021b704f7dfeb1fcd09RelatedExploitThird Party Advisory
lavender-bicycle-a5a.notion.site/D-Link-DIR-605L-formSetPassword-1b153a41781f803d8166f9b551b30cd4ExploitThird Party Advisory
www.dlink.comProduct

Related vulnerabilities

CVE-2018-20057d-linkdir-605l_firmware+17.40%7y ago11-12-2018 09:00An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter.CVE-2018-20056d-linkdir-605l_firmware+17.04%7y ago11-12-2018 09:00An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. There is a stack-based buffer overflow allowing remote attackers to execute arbitrary code without authentication via the goform/formLanguageChange currTime parameter.CVE-2021-40655dlinkdir-605l_firmwareKEV86.66%5y ago24-09-2021 20:11An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page CVE-2025-2548d-linkdir-605l_firmware+31.03%1y ago20-03-2025 15:31A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-2547d-linkdir-605l_firmware+30.79%1y ago20-03-2025 15:31A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.CVE-2025-2546d-linkdir-605l_firmware+310.76%1y ago20-03-2025 15:00A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

All vulnerabilities indir-605l_firmware dir-618 dir-605l_firmware dir-618_firmware

CVE-2025-2549: d-link dir-605l_firmware Incorrect Privilege Assignment

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References