D-Link DIR-619L Command Injection Vulnerability in formSysCmd Function

Vulnerability

A critical command injection vulnerability has been identified in the D-Link DIR-619L router, specifically in version 2.04B04. The issue arises in the formSysCmd function, where improper handling of the sysCmd argument allows for remote command execution. This vulnerability affects devices that are no longer supported by the vendor.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
7.8
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.