PT-2025-30355 · D Link · D-Link Dir-513

Yning · Published 2025-07-20 · Updated 2025-07-23 · CVE-2025-7945

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 versions up to 20190831

Description A critical issue exists in D-Link DIR-513. The vulnerability is due to a buffer overflow in the formSetWanDhcpplus function within the /goform/formSetWanDhcpplus file. The curTime argument can be manipulated to trigger the overflow, allowing for remote exploitation. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations D-Link DIR-513 versions up to 20190831: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2025-08941

CVE-2025-7945

Affected Products

D-Link Dir-513

References · 12

• https://bdu.fstec.ru/vul/2025-08941 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-7945 · Security Note
• https://twitter.com/marcin_brz81183/status/1947647689732059314 · Twitter Post
• https://vuldb.com/?ctiid.317086 · Note
• https://vuldb.com/?id.317086 · Note
• https://t.me/cvetracker/28344 · Telegram Post
• https://twitter.com/ET_Labs/status/1948113728219853001 · Twitter Post
• https://vuldb.com/?submit.619200 · Note
• https://twitter.com/CVEnew/status/1947444715554533692 · Twitter Post
• https://t.me/cvenotify/129758 · Telegram Post
• https://dlink.com · Note
• https://github.com/LYN1ng/D-linkdir513/blob/main/Dlink_DIR-513_Buffer_Overflow_Vulnerability.md · Note