D-Link Dir 619l Firmware

DIR-619L 2.06B01: formSetWAN_Wizard51 Stack Buffer Overflow (Remote)
CVE-2025-6616 8.8 - High - June 25, 2025

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWAN_Wizard51 of the file /goform/formSetWAN_Wizard51. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

Critical Buffer Overflow in D-Link DIR-619L 2.06B01's formAdvanceSetup
CVE-2025-6617 8.8 - High - June 25, 2025

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01: Critical Stack Overflo in formSetWANType_Wizard5
CVE-2025-6614 8.8 - High - June 25, 2025

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetWANType_Wizard5 of the file /goform/formSetWANType_Wizard5. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01: Critical stack overflow in formAutoDetecWAN_wizard4
CVE-2025-6615 8.8 - High - June 25, 2025

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formAutoDetecWAN_wizard4 of the file /goform/formAutoDetecWAN_wizard4. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01 Remote Stack Buffer Overflow via formSetACLFilter
CVE-2025-6374 8.8 - High - June 21, 2025

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formSetACLFilter of the file /goform/formSetACLFilter. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01 formSetWizard1 Stack Buffer Overflow Remote
CVE-2025-6373 8.8 - High - June 21, 2025

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWizard1 of the file /goform/formWlSiteSurvey. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01: Critical Remote Stack Buffer Overflow in formSetWizard1
CVE-2025-6372 8.8 - High - June 20, 2025

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formSetWizard1 of the file /goform/formSetWizard1. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

Critical Stack Overflow in D-Link DIR-619L 2.06B01 formSetEnableWizard
CVE-2025-6371 8.8 - High - June 20, 2025

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

DIR-619L 2.06B01: formWlanGuestSetup Stack Buffer Overflow Remote
CVE-2025-6370 8.8 - High - June 20, 2025

A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the function formWlanGuestSetup of the file /goform/formWlanGuestSetup. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01: Remote SBOP via formdumpeasysetup Stack Buffer Overflow
CVE-2025-6369 8.8 - High - June 20, 2025

A vulnerability classified as critical has been found in D-Link DIR-619L 2.06B01. Affected is the function formdumpeasysetup of the file /goform/formdumpeasysetup. The manipulation of the argument curTime/config.save_network_enabled leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

DIR-619L 2.06B01 Stack Buffer Overflow in /goform/formSetEmail
CVE-2025-6368 8.8 - High - June 20, 2025

A vulnerability was found in D-Link DIR-619L 2.06B01. It has been rated as critical. This issue affects the function formSetEmail of the file /goform/formSetEmail. The manipulation of the argument curTime/config.smtp_email_subject leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L stack buffer overflow in /goform/formSetDomainFilter pre 2.06B01
CVE-2025-6367 8.8 - High - June 20, 2025

A vulnerability was found in D-Link DIR-619L 2.06B01. It has been declared as critical. This vulnerability affects unknown code of the file /goform/formSetDomainFilter. The manipulation of the argument curTime/sched_name_%d/url_%d leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01 stack-based BOff in form_portforwarding
CVE-2025-6114 8.8 - High - June 16, 2025

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this vulnerability is the function form_portforwarding of the file /goform/form_portforwarding. The manipulation of the argument ingress_name_%d/sched_name_%d/name_%d leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

D-Link DIR-619L 2.06B01: Remote Stack Buffer Overflow in form_macfilter
CVE-2025-6115 8.8 - High - June 16, 2025

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. Affected by this issue is the function form_macfilter. The manipulation of the argument mac_hostname_%d/sched_name_%d leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Buffer Overflow

Critical Command Injection via wake_on_lan in D-Link DIR-619L 2.04B04
CVE-2025-4454 9.8 - Critical - May 09, 2025

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Command Injection

DIR-619L 2.04B04 CMD-INJ via formSysCmd Remote
CVE-2025-4453 9.8 - Critical - May 09, 2025

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Command Injection

Buffer Overflow in D-Link DIR-619L 2.04B04's formSetWizard2 (Remote)
CVE-2025-4452 9.8 - Critical - May 09, 2025

A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Classic Buffer Overflow

D-Link DIR-619L 2.04B04 Buffer Overflow in formSetWAN_Wizard52
CVE-2025-4451 9.8 - Critical - May 09, 2025

A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Classic Buffer Overflow

Critical Remote Buffer Overflow in D-Link DIR-619L 2.04B04 formEasySetupWizard
CVE-2025-4448 9.8 - Critical - May 09, 2025

A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Classic Buffer Overflow

D-Link DIR-619L 2.04B04 Buffer Overflow via wan_conn in formEasySetupWizard3
CVE-2025-4449 9.8 - Critical - May 09, 2025

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wan_connected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Classic Buffer Overflow

Critical Buffer Overflow in D-Link DIR-619L 2.04B04 formSetEasy_Wizard
CVE-2025-4450 9.8 - Critical - May 09, 2025

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.

Classic Buffer Overflow

DIR-619L 2.06 Remote Buffer Overflow via formVirtualServ
CVE-2024-9915 8.8 - High - October 13, 2024

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formVirtualServ of the file /goform/formVirtualServ. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 Remote Buffer Overrun via formSetWizardSelectMode
CVE-2024-9914 8.8 - High - October 13, 2024

A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formSetWizardSelectMode of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 Remote BUFOV in /goform/formSetRoute
CVE-2024-9913 8.8 - High - October 13, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

DIR-619L B1 2.06 Buffer Overflow via curTime in formSetQoS
CVE-2024-9912 8.8 - High - October 13, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formSetQoS of the file /goform/formSetQoS. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L 2.06 Buffer Overflow in formSetPortTr Remote Attack
CVE-2024-9911 8.8 - High - October 13, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been classified as critical. This affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 bufovf in formSetPassword
CVE-2024-9910 8.8 - High - October 13, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 Buffer Overflow in formSetMuti via curTime
CVE-2024-9909 8.8 - High - October 13, 2024

A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is the function formSetMuti of the file /goform/formSetMuti. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

buffer overflow in /goform/formSetMACFilter on D-Link DIR-619L B1 2.06 critical
CVE-2024-9908 8.8 - High - October 13, 2024

A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument curTime leads to buffer overflow. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 Remote Buffer Overflow via formSetDDNS
CVE-2024-9785 8.8 - High - October 10, 2024

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. Affected by this vulnerability is the function formSetDDNS of the file /goform/formSetDDNS. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L Critical Remote Buffer Overflow in formSetLog (B1 2.06)
CVE-2024-9786 8.8 - High - October 10, 2024

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. Affected by this issue is the function formSetLog of the file /goform/formSetLog. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

Critical Buffer Overflow in formEasySetupWWConfig of D-Link DIR-619L 2.06
CVE-2024-9782 8.8 - High - October 10, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been declared as critical. This vulnerability affects the function formEasySetupWWConfig of the file /goform/formEasySetupWWConfig. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 Buffer Overflow formLogDnsquery (Remote)
CVE-2024-9783 8.8 - High - October 10, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06. It has been rated as critical. This issue affects the function formLogDnsquery of the file /goform/formLogDnsquery. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L 2.06 Buffer Overflow in formResetStatistic
CVE-2024-9784 8.8 - High - October 10, 2024

A vulnerability classified as critical has been found in D-Link DIR-619L B1 2.06. Affected is the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 buffer overflow in formEasySetTimezone
CVE-2024-9570 8.8 - High - October 07, 2024

A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formEasySetTimezone of the file /goform/formEasySetTimezone. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06: Remote BO in formAdvNetwork
CVE-2024-9568 8.8 - High - October 07, 2024

A vulnerability, which was classified as critical, was found in D-Link DIR-619L B1 2.06. Affected is the function formAdvNetwork of the file /goform/formAdvNetwork. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

D-Link DIR-619L B1 2.06 Remote Buffer Overflow via formEasySetPassword
CVE-2024-9569 8.8 - High - October 07, 2024

A vulnerability has been found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this vulnerability is the function formEasySetPassword of the file /goform/formEasySetPassword. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

Critical BOF in D-Link DIR-619L B1 2.06 formAdvFirewall
CVE-2024-9567 8.8 - High - October 07, 2024

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L B1 2.06. This issue affects the function formAdvFirewall of the file /goform/formAdvFirewall. The manipulation of the argument curTime leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

Critical Buffer Overflow in D-Link DIR-619L B1 2.06 formDeviceReboot
CVE-2024-9566 8.8 - High - October 07, 2024

A vulnerability classified as critical was found in D-Link DIR-619L B1 2.06. This vulnerability affects the function formDeviceReboot of the file /goform/formDeviceReboot. The manipulation of the argument next_page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Classic Buffer Overflow

Boa Buffer Overflow on D-Link DIR-619L 2.06B1 via webpage param
CVE-2024-33771 - May 14, 2024

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."

D-Link DIR-619L 2.06B1 /bin/boa Buffer Overflow allows DoS via curTime
CVE-2024-33772 - May 14, 2024

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "curTime."

Buffer Overflow in /bin/boa on D-Link DIR-619L Rev.B 2.06B1
CVE-2024-33773 - May 14, 2024

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."

D-Link DIR-619L Rev.B 2.06B1 /bin/boa buffer overflow via formWlanSetup
CVE-2024-33774 - May 14, 2024

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a denial of service (DoS) through the parameter "webpage."

Buffer Overflow in D-Link DIR-619L B1 2.02 formLanguageChange (CVE-2023-43862)
CVE-2023-43862 7.5 - High - September 28, 2023

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function.

Memory Corruption