PT-2025-30221 · Unknown+1 · Boa Web Server+1

Bazhuayu · Published 2025-07-18 · Updated 2025-07-25 · CVE-2025-7910

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10

Description A critical vulnerability exists in the Boa Webserver component of the D-Link DIR-513. The sprintf function within the /goform/formSetWanNonLogin file is susceptible to a stack-based buffer overflow when the curTime argument is manipulated. This allows for remote exploitation. The exploit for this issue has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations D-Link DIR-513 version 1.10: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-08946

CVE-2025-7910

Affected Products

Boa Web Server

Dir-513

References · 15

• 🔥 https://github.com/buobo/bo-s-CVE/blob/main/DIR-513/formSetWanNonLogin.md · Exploit
• https://bdu.fstec.ru/vul/2025-08946 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-7910 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7910 · Vendor Advisory
• https://twitter.com/CVEnew/status/1947063358793916923 · Twitter Post
• https://t.me/cvenotify/129631 · Telegram Post
• https://twitter.com/marcin_brz81183/status/1947198789552341234 · Twitter Post
• https://twitter.com/CveFindCom/status/1947298731272839208 · Twitter Post
• https://vuldb.com/?id.317025 · Note
• https://vuldb.com/?submit.618594 · Note
• https://twitter.com/VulmonFeeds/status/1947061745463279794 · Twitter Post
• https://vuldb.com/?ctiid.317025 · Note
• https://twitter.com/dailycve/status/1948795651589820525 · Twitter Post
• https://dlink.com · Note
• https://t.me/cvetracker/28294 · Telegram Post