CVE-2025-65731: dlink dir-605l_firmware

Vulnerability summary

CVE-2025-65731 is a medium (CVSS 6.8) vulnerability in dlink dir-605l_firmware. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.7% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 08-01-2026
   PublishedVulnerability first disclosed.
2. 09-01-2026
   Last modifiedVulnerability information updated.

Description

An issue was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: V6.02CN02) allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control.

• CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.