{"id":"CVE-2025-4443","published":"2025-05-08T23:31:26Z","modified":"2025-05-09T03:54:24Z","title":"D-Link DIR-605L sub_454F2C command injection","vendor":"D-Link","product":"DIR-605L","tier":"core","eol":null,"affectedVersions":[{"vendor":"D-Link","product":"DIR-605L","versions":["2.13B01"]}],"description":{"text":"A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.","provenance":"source","from":"CVE.org"},"summary":{"text":"A command injection flaw exists in the sub_454F2C function of the D-Link DIR-605L router firmware, where the sysCmd argument is not properly sanitised before being passed to a system command. An attacker with low-privileged credentials on the device, reachable over the network and requiring no user interaction, could inject arbitrary operating system commands and affect the confidentiality, integrity and availability of the device.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:22:26Z"},"cvss":{"score":6.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.6274,"percentile":0.99192,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"},{"id":"CWE-74","name":"Improper Neutralization of Special Elements in Output Used by a Downstream Component"}],"references":[{"url":"https://vuldb.com/?id.308051","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.308051","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.558355","tags":["third-party-advisory"]},{"url":"https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir605l/Command_injection-sub_454F2C-sysCmd/README.md","tags":["related"]},{"url":"https://www.dlink.com/","tags":["broken-link","product"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2025-14058","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-14058","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2025-05-08","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2025-4443","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":24.2,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.84,"detail":"percentile 0.9919"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":4.41,"detail":"base score 6.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}