CVE-2025-2551

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-266CWE-284

Affected software

VendorProductVersions
D-LinkDIR-6182.02; 3.02
D-LinkDIR-605L2.02; 3.02

References

Timeline

Published
Mar 20, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-255106.5Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.CVE-2025-255139.8Seacms <=13.3 is vulnerable to SQL Injection in admin_members.php.CVE-2025-255146.5Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php.CVE-2025-255158.8Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the database.CVE-2025-255169.8Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.CVE-2025-255179.8Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php.CVE-2025-255199.8Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.CVE-2025-25524.3A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown CVE-2025-255209.8Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php.CVE-2025-255219.8Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.CVE-2025-255227.3Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting opCVE-2025-255235.9Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related t
CVE-2025-2551: Medium severity, CVSS 4.3 | Vulnix