CVE-2025-46176

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve@mitre.org

Published

2025-05-23

Last modified

2025-05-23

Weaknesses

CWE-77

Affected products

• Dir-605l Firmware (Dlink)
• Dir-816l Firmware (Dlink)

References

• https://github.com/namberino/cve/tree/main/CVE-2025-46176
• https://www.dlink.com/en/security-bulletin/