CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module

Critical · published February 12, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow lurking in the D-Link DIR-853 could let attackers crash your router with a single misconfigured password! 🔥 Think of it like an overstuffed suitcase at the airport—if you cram too much in, it might burst open, spilling everything everywhere. This vulnerability allows a crafted input to overload the system's memory, causing chaos. An attacker could exploit this vulnerability to gain unauthorized control over your router, potentially leading to data interception or even a total service disruption. Imagine your internet going down suddenly while you're in the middle of something important—frustrating, right? This is a critical situation that needs addressing immediately!

Put simply

Think of it like an overstuffed suitcase at the airport—if you cram too much in, it might burst open, spilling everything everywhere. This vulnerability allows a crafted input to overload the system's memory, causing chaos. This stack-based buffer overflow in D-Link DIR-853's SetWanSettings module occurs when the Password parameter is improperly validated, allowing attackers to overwrite memory and execute arbitrary code.

What to do

An attacker could exploit this vulnerability to gain unauthorized control over your router, potentially leading to data interception or even a total service disruption. Imagine your internet going down suddenly while you're in the middle of something important—frustrating, right? This is a critical situation that needs addressing immediately! Patch your D-Link DIR-853 A1 router to Firmware version 1.20B08 or later immediately. Additionally, consider changing default credentials and regularly updating your device firmware for continuous protection. 🛡️ You've got this! Follow these steps, and you'll be on your way to securing your network in no time! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00594 · 47.7th percentile
Published
2025-02-12T00:00Z
EPSS history
Timeline
  • 12 FEB 00:00Z
    D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module
    cvelistv5