CVE-2025-55611
Published: 22 August 2025
Summary
CVE-2025-55611 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Dlink Dir-619L Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 30.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-55611 is a buffer overflow vulnerability (CWE-787, CWE-120) in the D-Link DIR-619L router running firmware version 2.06B01. The flaw occurs in the formLanguageChange function when processing the nextPage parameter, potentially allowing memory corruption due to insufficient bounds checking on user-supplied input.
Remote attackers require no authentication, privileges, or user interaction to exploit this vulnerability over the network with low complexity. The CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) indicates that successful exploitation results in high-impact denial of service, such as device crashes or reboots, with no effects on confidentiality or integrity.
References to the vulnerability include GitHub disclosures at https://github.com/wudipjq/my_vuln/blob/main/D-Link6/vuln_80/80.md, which provide additional technical details on the issue. No official patches or vendor advisories are specified in the available information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-25584
Vulnerability details
D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in the web interface (formLanguageChange via nextPage) of the public-facing D-Link DIR-619L router enables exploitation of a public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly addresses the buffer overflow by enforcing bounds checking and validation on the unauthenticated nextPage parameter in formLanguageChange.
Requires identification and timely remediation of the specific buffer overflow flaw in the router firmware to eliminate the vulnerability.
Implements memory protections such as stack canaries, ASLR, and DEP to mitigate exploitation of the buffer overflow even if input validation fails.