PT-2025-41393 · D Link · D-Link Dir-816 A2

Flechao1 + 1 · Published 2025-10-09 · Updated 2025-10-29 · CVE-2025-61577

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-816A2 version FWv1.10CNB05

Description The D-Link DIR-816A2 firmware version FWv1.10CNB05 contains a stack overflow issue. This occurs through the statuscheckpppoeuser parameter within the dir setWanWifi function. A crafted input to this parameter can lead to a Denial of Service (DoS). The statuscheckpppoeuser parameter is vulnerable. The dir setWanWifi function is vulnerable.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-61577

Affected Products

D-Link Dir-816 A2

References · 10

• 🔥 https://github.com/peris-navince/founded-0-days/blob/main/Dlink/816/dir_setWanWifi/1.md · Exploit
• 🔥 https://github.com/Flechao1/iot-vuln/blob/main/dlink-816-b05.md · Exploit
• https://dlink.com/en/security-bulletin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61577 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61577 · Security Note
• https://t.me/cveNotify/140796 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1976328267863871903 · Twitter Post
• https://twitter.com/CVEnew/status/1976316285987455439 · Twitter Post
• https://t.me/CVEtracker/34543 · Telegram Post
• https://twitter.com/CVEnew/status/1976344625657872499 · Twitter Post