CVE-2025-5622CWE-119CWE-121

D-Link DIR-816 wirelessApcli_5g stack-based overflow

Critical · published June 5, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow lurking in D-Link routers could let attackers remotely take control—yikes! 🔥 Think of it like a delivery truck packed so tightly with boxes that one wrong move could cause it to burst open, spilling all its contents everywhere. In this case, a slight miscalculation in handling arguments can lead to total system chaos. An attacker could exploit this vulnerability to execute arbitrary code, potentially compromising your entire network. This means unauthorized access to sensitive information and control over connected devices. It's a recipe for disaster, especially since these devices are no longer receiving security updates!

Put simply

Think of it like a delivery truck packed so tightly with boxes that one wrong move could cause it to burst open, spilling all its contents everywhere. In this case, a slight miscalculation in handling arguments can lead to total system chaos. This critical vulnerability in D-Link DIR-816 firmware results from improper handling of arguments in the function wirelessApcli_5g, leading to a stack-based buffer overflow. If exploited, this allows attackers to execute harmful code remotely.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, potentially compromising your entire network. This means unauthorized access to sensitive information and control over connected devices. It's a recipe for disaster, especially since these devices are no longer receiving security updates! Immediate steps include replacing these outdated devices with supported models to improve security. If replacement is not feasible, consider implementing network segmentation to limit exposure and increasing monitoring for suspicious activity. Remember, phasing out unsupported hardware is crucial! You've got this! By staying proactive, you can keep your network safe and secure. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02490 · 84.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-06-05T00:00Z
EPSS history
Timeline
  • 05 JUN 00:00Z
    D-Link DIR-816 wirelessApcli_5g stack-based overflow
    cvelistv5