D-Link DIR-605L Command Injection Vulnerability

Vulnerability

A critical command injection vulnerability has been identified in the D-Link DIR-605L router, specifically in version 2.13B01. The issue arises in the function sub_454F2C, where improper handling of the sysCmd argument allows for remote command execution. This vulnerability affects devices that are no longer supported by the vendor.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.7
impact
10.0
exploitability
4.9
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.