D-Link DIR-619L Buffer Overflow Vulnerability in formSetEasy_Wizard Function

Vulnerability

A critical buffer overflow vulnerability has been identified in the D-Link DIR-619L router, specifically in version 2.04B04. The issue arises in the formSetEasy_Wizard function, where improper handling of the curTime argument allows for remote exploitation. This vulnerability affects devices that are no longer supported by the vendor.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a denial-of-service condition on the device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
6.2
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.