ByteOS Network

NVD Vulnerability Details :

CVE-2025-8978

Awaiting Analysis

Source-cna@vuldb.com

Published At-14 Aug, 2025 | 19:15

Updated At-15 Aug, 2025 | 13:12

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	6.6	MEDIUM	CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	6.6	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	2.0	6.8	MEDIUM	AV:N/AC:H/Au:M/C:C/I:C/A:C

Weaknesses

CWE ID	Type	Source
CWE-345	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR619L.md	cna@vuldb.com	N/A
https://vuldb.com/?ctiid.319974	cna@vuldb.com	N/A
https://vuldb.com/?id.319974	cna@vuldb.com	N/A
https://vuldb.com/?submit.628599	cna@vuldb.com	N/A
https://www.dlink.com/	cna@vuldb.com	N/A
https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DIR619L.md	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History