PT-2025-47046 · D Link · Dir-816

Lexpl0It · Published 2025-11-15 · Updated 2025-11-20 · CVE-2025-13191

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-816L version 2 06 b09 beta

Description A stack-based buffer overflow exists in the soapcgi main function of the /soap.cgi file. This issue allows for remote exploitation. The exploit has been publicly disclosed. The affected product is no longer supported by the maintainer. The vulnerability stems from improper handling of input data within the soapcgi main function, potentially allowing an attacker to execute arbitrary code remotely.

Recommendations Replace or isolate affected devices.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-14836

CVE-2025-13191

Affected Products

Dir-816

References · 16

• 🔥 https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(soap.cgi).pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13191 · Security Note
• https://bdu.fstec.ru/vul/2025-14836 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13191 · Vendor Advisory
• https://twitter.com/offseq/status/1990208720265945097 · Twitter Post
• https://t.me/poxek/5676 · Telegram Post
• https://twitter.com/cracbot/status/1991461573119078661 · Twitter Post
• https://vuldb.com/?ctiid.332480 · Note
• https://twitter.com/CveTodo/status/1989596734880706653 · Twitter Post
• https://twitter.com/CveFindCom/status/1989599341921644739 · Twitter Post
• https://vuldb.com/?id.332480 · Note
• https://twitter.com/CVEnew/status/1989596419314127328 · Twitter Post
• https://t.me/cveNotify/142910 · Telegram Post
• https://t.me/CVEtracker/37413 · Telegram Post
• https://vuldb.com/?submit.685543 · Note