VDB
CVE-2025-6114
CVE-2025-6114
PUBLISHED
CVSS 9 CRITICAL
A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is the function form_portforwarding of the file /goform/form_portforwarding. The manipulation of the argument ingress_name_%d/sched_name_%d/name_%d leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
EPSS 1.57% · 74.4th percentile
Risk Scores
CVSS 2.0
9
EPSS Score
1.57%
74.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| dlink | dir-619l_firmware | 2.06b01 |
| D-Link | DIR-619L | * |
Timeline
- Jun 16, 2025 EPSS Score
- Jun 16, 2025 CVE Published
- Jun 16, 2025 PoC Published
- Jun 16, 2025 PoC Published
- Jun 16, 2025 CVE Updated
- Jun 27, 2025 EPSS Score
- Jul 8, 2025 EPSS Score
- Jul 18, 2025 EPSS Score
- Jul 29, 2025 EPSS Score
- Aug 9, 2025 EPSS Score
- Aug 20, 2025 EPSS Score
- Aug 31, 2025 EPSS Score
References
- https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_60/60.md exploit
- VDB-312583 | D-Link DIR-619L form_portforwarding stack-based overflow vdb
- VDB-312583 | CTI Indicators (IOB, IOC, IOA) url
- Submit #592568 | D-Link DIR619L 2.06B01 Stack-based Buffer Overflow third-party-advisory
- https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_60/60.md#poc exploit
- https://www.dlink.com/ url
- https://nvd.nist.gov/vuln/detail/CVE-2025-6114 advisory
- https://www.dlink.com url