CVE-2025-25742

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings…

Critical · published February 12, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in the D-Link DIR-853 A1 could unleash chaos through the AccountPassword parameter – it's like leaving a window wide open while you're away! Think of it like a tightly packed suitcase. If you try to stuff in too much, the contents overflow and pop out, potentially breaking the zipper. In this case, the overflow could allow an attacker to execute malicious code on your router. An attacker could potentially gain control of the device, manipulate network traffic, or even launch attacks on devices connected to the same network. The risks of unauthorized access and data breaches are absolutely devastating!

Put simply

Think of it like a tightly packed suitcase. If you try to stuff in too much, the contents overflow and pop out, potentially breaking the zipper. In this case, the overflow could allow an attacker to execute malicious code on your router. The vulnerability arises from improper handling of user input in the SetSysEmailSettings module, allowing an attacker to exploit the AccountPassword parameter to execute arbitrary code.

What to do

An attacker could potentially gain control of the device, manipulate network traffic, or even launch attacks on devices connected to the same network. The risks of unauthorized access and data breaches are absolutely devastating! Update the D-Link DIR-853 A1 to firmware version 1.20B08 immediately to close this dangerous vulnerability. Regularly auditing your router settings and securing the network with strong passwords will also enhance your protection. You’ve got this! By taking action now, you’ll be one step closer to locking down your network! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.3th percentile
Published
2025-02-12T00:00Z
EPSS history
Timeline
  • 12 FEB 00:00Z
    D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings…
    cvelistv5