PT-2025-7103 · D Link · D-Link Dir-853

Publicado 2025-02-07 · Atualizado 2025-02-15 · CVE-2025-25745

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07

Description: A stack-based buffer overflow issue was discovered via the Password parameter in the SetQuickVPNSettings module. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For D-Link DIR-853 A1 version FW1.20B07, consider restricting access to the SetQuickVPNSettings module until a patch is available. As a temporary workaround, avoid using the Password parameter in the affected module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

BDU:2025-01761

CVE-2025-25745

Produtos afetados

D-Link Dir-853

Referências · 7

• 🔥 https://dear-sunshine-ba5.notion.site/D-Link-DIR-853-2-1812386a664480ea82a7f8321d967187 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25745 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-25745 · Aviso do Fabricante
• https://vuldb.com/?id.295893 · Nota
• https://twitter.com/CVEnew/status/1890426120530538888 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-01761 · Nota de Segurança
• https://twitter.com/cybercronai/status/1890755578294587427 · Publicação no Twitter