CVE-2025-2546CWE-266CWE-284

D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control

Medium · published March 20, 2025

CVSS v4.0

5.3

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

The record

Technical detail

CVSS v4.0: 5.3 · MEDIUM
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.10763 · 95.8th percentile
Weaknesses: CWE-266 · Incorrect Privilege Assignment; CWE-284 · Improper Access Control
Published: 2025-03-20T15:00Z

EPSS history

Timeline

20 MAR 15:00Z
D-Link DIR-618/DIR-605L Firewall Service formAdvFirewall access control
cvelistv5