What is the CVSS score of CVE-2025-6372?

CVE-2025-6372 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Dir 619l Firmware are affected by CVE-2025-6372?

D-Link DIR-619L routers (v2.06B01) are vulnerable to remote code execution through a stack buffer overflow, with public exploits already available.

Is there a public PoC exploit available for CVE-2025-6372?

Yes, a public proof-of-concept exploit is available for CVE-2025-6372. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-6372?

Within 24 hours: Inventory all DIR-619L 2.06B01 devices and document network location and criticality. Within 7 days: Isolate affected devices from untrusted networks, disable remote management features, and restrict admin access to trusted IPs only. Within 30 days: Replace with vendor-supported equipment or implement network-based protections (WAF/IDS rules blocking malformed curTime parameters to /goform/formSetWizard1).

Dir 619l Firmware CVE-2025-6372

EUVD-2025-28730 HIGH

Buffer Overflow (CWE-119)

2025-06-20 cna@vuldb.com

Buffer Overflow D-Link RCE Dir 619l Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 00:19 euvd

EUVD-2025-28730

Analysis Generated

Mar 15, 2026 - 00:19 vuln.today

PoC Detected

Jun 25, 2025 - 20:09 vuln.today

Public exploit code

CVE Published

Jun 20, 2025 - 23:15 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formSetWizard1 of the file /goform/formSetWizard1. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.