CVE-2025-4348 - D-Link DIR-600L formSetWanL2TP buffer overflow

Back Back to CVE browser

HIGH

D-Link DIR-600L formSetWanL2TP buffer overflow

Published May 6, 2025

8.7

HIGH

CVSS 4.0

EPSS 2.44%

Description

A vulnerability was found in D-Link DIR-600L up to 2.07B01. It has been rated as critical. Affected by this issue is the function formSetWanL2TP. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor D-Link Product DIR-600L Default
n/a
- Version
  2.07B01
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

D-Link

DIR-600L

n/a

Version	Status	Constraints
2.07B01	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (5)

https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Buffer_ovrflow-formSetWanL2TP-curTime/README.md
relatedBroken LinkThird Party Advisory
https://vuldb.com/?ctiid.307466
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.307466
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.558301
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/
product

Link	Providers	Tags
https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir600l/Buffer_ovrflow-formSetWanL2TP-curTime/README.md		relatedBroken LinkThird Party Advisory
https://vuldb.com/?ctiid.307466		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.307466		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.558301		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.dlink.com/		product