PT-2025-30220 · Unknown+1 · Boa Web Server+1

Bazhuayu · Published 2025-07-18 · Updated 2025-07-25 · CVE-2025-7909

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.0

Description A critical vulnerability exists in the Boa Webserver component of the affected product. The sprintf function within the /goform/formLanSetupRouterSettings file is susceptible to a stack-based buffer overflow when the curTime argument is manipulated. This allows for remote attacks. The exploit for this vulnerability has been publicly disclosed and may be utilized. This issue only affects products that are no longer supported by the manufacturer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-08945

CVE-2025-7909

Affected Products

Boa Web Server

Dir-513

References · 15

• 🔥 https://github.com/buobo/bo-s-CVE/blob/main/DIR-513/formLanSetupRouterSettings.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-7909 · Security Note
• https://bdu.fstec.ru/vul/2025-08945 · Security Note
• https://vuldb.com/?submit.618593 · Note
• https://twitter.com/CveFindCom/status/1947298800734818790 · Twitter Post
• https://t.me/cvetracker/28293 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1947064305414738047 · Twitter Post
• https://vuldb.com/?ctiid.317024 · Note
• https://twitter.com/dailycve/status/1948795455833604419 · Twitter Post
• https://twitter.com/CVEnew/status/1947051857404178782 · Twitter Post
• https://t.me/cvenotify/129630 · Telegram Post
• https://t.me/cvenotify/129683 · Telegram Post
• https://twitter.com/marcin_brz81183/status/1947198074603921878 · Twitter Post
• https://vuldb.com/?id.317024 · Note
• https://dlink.com · Note