What is the CVSS score of CVE-2025-65731?

CVE-2025-65731 has a CVSS 3.1 base score of 6.8 (Medium). CVSS vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dir 605l Firmware are affected by CVE-2025-65731?

CVE-2025-65731 presents notable security risk, a missing authentication vulnerability rated CVSS 6.8. This could allow unauthorized access to protected resources.

Is there a public PoC exploit available for CVE-2025-65731?

Yes, a public proof-of-concept exploit is available for CVE-2025-65731. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-65731?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Audit authentication configurations.

Dir 605l Firmware CVE-2025-65731

MEDIUM

Missing Authentication for Critical Function (CWE-306)

2026-01-08 cve@mitre.org

D-Link Dir 605l Firmware

6.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 30, 2026 - 01:07 vuln.today

Public exploit code

CVE Published

Jan 08, 2026 - 19:15 nvd

MEDIUM 6.8

DescriptionCVE.org

An issue was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: V6.02CN02) allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control.

AnalysisAI

Dir-605L Firmware versions up to 6.02cn02 is affected by missing authentication for critical function (CVSS 6.8).

Technical ContextAI

This vulnerability (CWE-306: Missing Authentication for Critical Function) affects Dir-605L Firmware. was discovered in D-Link Router DIR-605L (Hardware version F1; Firmware version: V6.02CN02) allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control.

RemediationAI

Monitor vendor advisories for a patch.

More in Dir 605l Firmware

View all

CVE-2014-8361 CRITICAL Emergency POC

9.8 May 01

The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClien

CVE-2017-9675 HIGH Act Now POC

7.5 Jun 15

On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

CVE-2023-29961 CRITICAL Act Now POC

9.8 May 16

D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,. Rated critica

CVE-2023-24352 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo

CVE-2023-24351 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /gof

CVE-2023-24350 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject

CVE-2023-24349 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

CVE-2023-24348 CRITICAL Act Now POC

9.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

CVE-2018-20056 CRITICAL Act Now POC

9.8 Dec 11

An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. Rated critical se

CVE-2024-37630 HIGH This Week POC

8.8 Jun 13

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attac

CVE-2023-24347 HIGH This Week POC

8.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo

CVE-2023-24346 HIGH This Week POC

8.8 Feb 10

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at

Same weakness CWE-306 – Missing Authentication for Critical Function

View all

CVE-2024-0012 CRITICAL POC

9.3

CVE-2017-10271 HIGH POC

7.5

CVE-2025-3248 CRITICAL POC

9.8

CVE-2024-11680 CRITICAL POC

9.8

CVE-2024-51567 CRITICAL POC

9.8

CVE-2025-0108 HIGH POC

8.8

CVE-2025-32433 CRITICAL POC

10.0

CVE-2016-2004 CRITICAL POC

9.8

CVE-2025-65731 vulnerability details – vuln.today

Back

Dir 605l Firmware CVE-2025-65731

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Dir 605l Firmware

Same weakness CWE-306 – Missing Authentication for Critical Function

Share

External POC / Exploit Code