Analysis Summary

CVE-2025-4343 CVSS:8.8

A vulnerability has been found in D-Link DIR-600L and classified as critical. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-4342 CVSS:8.8

A vulnerability, which was classified as critical, has been found in D-Link DIR-600L. Affected by this issue is the function formEasySetupWizard3. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Impact

• Buffer Overflow

Indicators of Compromise

CVE

• CVE-2025-4342

• CVE-2025-4343

Affected Vendors

Remediation

Refer to the D-Link Website for patch, upgrade, or suggested workaround information.

D-Link Website