MEDIUM
D-Link DIR-619L wake_on_lan command injection
Published May 9, 2025
5.3
MEDIUMCVSS 4.0
EPSS 6.98%
Description
A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
-
- Version 2.04B04StatusaffectedConstraints-
- Version
AND
- 2.04b04
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Command_injection-wake_on_lan-mac/README.md relatedBroken Link
- https://vuldb.com/?ctiid.308068 signaturepermissions-requiredPermissions Required
- https://vuldb.com/?id.308068 vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.560798 third-party-advisoryThird Party AdvisoryVDB Entry
- https://www.dlink.com/ product
| Link | Providers | Tags |
|---|---|---|
| https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Command_injection-wake_on_lan-mac/README.md | relatedBroken Link | |
| https://vuldb.com/?ctiid.308068 | signaturepermissions-requiredPermissions Required | |
| https://vuldb.com/?id.308068 | vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.560798 | third-party-advisoryThird Party AdvisoryVDB Entry | |
| https://www.dlink.com/ | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published May 9, 2025
Updated May 9, 2025
Reserved May 8, 2025
Link CVE-2025-4454
CISA Vulnrichment
Updated May 9, 2025