CVE-2025-5624CWE-119CWE-121

D-Link DIR-816 QoSPortSetup stack-based overflow

Critical · published June 5, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

🚨 A remote attacker can trigger a stack-based buffer overflow in D-Link DIR-816 routers, putting your network at serious risk! 🔥 Think of it like a delivery driver misplacing a huge stack of packages, causing a traffic jam that brings everything to a standstill. In this case, the vulnerability lets attackers mess with your router's processes without so much as a knock on the door! If exploited, this vulnerability could allow an attacker to execute arbitrary code, leading to unauthorized access to your network, stolen data, or even a complete takeover of the device. The potential chaos is absolutely devastating!

Put simply

Think of it like a delivery driver misplacing a huge stack of packages, causing a traffic jam that brings everything to a standstill. In this case, the vulnerability lets attackers mess with your router's processes without so much as a knock on the door! This critical vulnerability arises from improper handling of arguments in the QoSPortSetup function, leading to a stack-based buffer overflow that attackers can use to inject malicious code remotely.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code, leading to unauthorized access to your network, stolen data, or even a complete takeover of the device. The potential chaos is absolutely devastating! To safeguard your network, immediately disconnect any vulnerable D-Link DIR-816 devices, especially since they are no longer supported. If possible, replace them with newer, secure models and consider updating your network configurations to enhance security practices. You've got this! By taking these steps, you can bolster your defenses and keep your network safe! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02490 · 84.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-06-05T00:31Z
EPSS history
Timeline
  • 05 JUN 00:31Z
    D-Link DIR-816 QoSPortSetup stack-based overflow
    cvelistv5