PT-2025-24721 · D Link · D-Link Dir-632

Xiaobor123 · Published 2025-06-10 · Updated 2025-07-27 · CVE-2025-5969

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-632 version FW103B08

Description A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the FUN 00425fd8 function of the file /biurl grou. This issue leads to a stack-based buffer overflow and can be exploited remotely. The problem only affects products that are no longer supported by the maintainer.

Recommendations For D-Link DIR-632 version FW103B08, as the product is no longer supported, consider disabling the FUN 00425fd8 function or restricting access to the HTTP POST Request Handler to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-09540

CVE-2025-5969

Affected Products

D-Link Dir-632

References · 12

• 🔥 https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink-FUN_00425fd8#poc · Exploit
• 🔥 https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink-FUN_00425fd8 · Exploit
• https://bdu.fstec.ru/vul/2025-09540 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5969 · Security Note
• https://t.me/cvenotify/129225 · Telegram Post
• https://t.me/cvetracker/25939 · Telegram Post
• https://vuldb.com/?ctiid.311845 · Note
• https://vuldb.com/?submit.592336 · Note
• https://twitter.com/CVEnew/status/1932512997781676381 · Twitter Post
• https://dlink.com · Note
• https://vuldb.com/?id.311845 · Note