1. Home
  2. CVE Database
  3. CVE-2025-46176
MEDIUM · 6.5

CVE-2025-46176

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.

Vulnerability Description

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
DlinkDir-605L Firmware2.13b01
DlinkDir-605L-
DlinkDir-816L Firmware2.06b01
DlinkDir-816L-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2025-46176?

CVE-2025-46176 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis.

How severe is CVE-2025-46176?

CVE-2025-46176 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-46176?

Check the references section above for vendor advisories and patch information. Affected products include: Dlink Dir-605L Firmware, Dlink Dir-605L, Dlink Dir-816L Firmware, Dlink Dir-816L.