PT-2025-38705 · D Link · D-Link Dir-513 A1Fw110

Panda_0X1 · Published 2025-09-14 · Updated 2025-10-08 · CVE-2025-10792

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 A1FW110 (affected versions not specified)

Description A security issue has been identified in D-Link DIR-513 A1FW110. Manipulation of the webpage argument in the file /goform/formWPS can lead to a buffer overflow. This issue may be exploited remotely. The exploit has been publicly disclosed. This vulnerability affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

CWE-120

Related Identifiers

BDU:2025-11533

CVE-2025-10792

Affected Products

D-Link Dir-513 A1Fw110

References · 15

• 🔥 https://github.com/panda666-888/vuls/blob/main/d-link/dir-513/formWPS.md · Exploit
• 🔥 https://github.com/panda666-888/vuls/blob/main/d-link/dir-513/formWPS.md#poc · Exploit
• https://osv.dev/vulnerability/CVE-2025-10792 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11533 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10792 · Security Note
• https://twitter.com/cracbot/status/1971892637348045278 · Twitter Post
• https://twitter.com/CVEnew/status/1970061268837933289 · Twitter Post
• https://t.me/cveNotify/137874 · Telegram Post
• https://vuldb.com/?ctiid.325149 · Note
• https://twitter.com/cracbot/status/1971530252016038382 · Twitter Post
• https://t.me/CVEtracker/33050 · Telegram Post
• https://vuldb.com/?submit.654049 · Note
• https://twitter.com/CveFindCom/status/1970067905816494388 · Twitter Post
• https://dlink.com · Note
• https://vuldb.com/?id.325149 · Note