CVE-2025-5630CWE-119CWE-121

D-Link DIR-816 form2lansetup.cgi stack-based overflow

Critical · published June 5, 2025

CVSS v4.0
9.3
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in the D-Link DIR-816 could spell disaster for your network! This critical vulnerability puts you at risk of remote attacks, and it's hiding in the shadows of unsupported firmware. 🔥 Think of it like a poorly designed hotel entrance where anyone can slip in and manipulate the guest list. With the right code, an attacker can push their way into sensitive areas of your network without ever having to show ID! An attacker could exploit this vulnerability to take full control of the device—imagine them sneaking into your network and having access to everything! They could disrupt your internet connection or even eavesdrop on your private communication. The stakes are high!

Put simply

Think of it like a poorly designed hotel entrance where anyone can slip in and manipulate the guest list. With the right code, an attacker can push their way into sensitive areas of your network without ever having to show ID! This vulnerability arises from a manipulation of the 'ip' argument in the '/goform/form2lansetup.cgi' file, leading to a stack-based buffer overflow that could allow remote code execution.

What to do

An attacker could exploit this vulnerability to take full control of the device—imagine them sneaking into your network and having access to everything! They could disrupt your internet connection or even eavesdrop on your private communication. The stakes are high! Immediate action is required! Since this product is no longer supported, consider replacing the device with a newer model. Ensure all sensitive data is backed up and monitor your network for any suspicious activity. Stay vigilant! You've got this! By following these steps, you can protect your network and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02580 · 85.1th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-06-05T02:00Z
EPSS history
Timeline
  • 05 JUN 02:00Z
    D-Link DIR-816 form2lansetup.cgi stack-based overflow
    cvelistv5