CVE-2025-2553
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 276
Summary
CVE-2025-2553 is a newly discovered vulnerability that affects outdated D-Link DIR-618 and DIR-605L routers running versions 2.02 and 3.02. The issue lies in the processing of the file /goform/formVirtualServ and results in improper access controls. An attacker, with access to the local network, can exploit this vulnerability, which has been disclosed to the public. Unfortunately, this weakness only affects unsupported products, leaving vulnerable users without a patch from the manufacturer.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.