D-Link DIR-619L Command Injection Vulnerability in Wake-on-LAN Function

Vulnerability

A critical command injection vulnerability has been identified in the D-Link DIR-619L router, specifically in version 2.04B04. The issue arises in the wake-on-lan function, where improper handling of the MAC address argument allows for remote command injection. This vulnerability affects devices that are no longer supported by the vendor.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
4.5
impact
7.5
exploitability
6.2
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.