PT-2025-7102 · D Link · D-Link Dir-853

Published 2025-02-07 · Updated 2025-02-12 · CVE-2025-25744

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07

Description: A stack-based buffer overflow issue was discovered through the Password parameter in the SetDynamicDNSSettings module. This allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world incidents.

Recommendations: For D-Link DIR-853 A1 version FW1.20B07, consider disabling the SetDynamicDNSSettings module until a patch is available to prevent exploitation via the Password parameter. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2025-04028

CVE-2025-25744

Affected Products

D-Link Dir-853

References · 9

• 🔥 https://dear-sunshine-ba5.notion.site/D-Link-DIR-853-4-1812386a664480378626cc13b98e18f5 · Exploit
• https://osv.dev/vulnerability/CVE-2025-25744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25744 · Security Note
• https://bdu.fstec.ru/vul/2025-04028 · Security Note
• https://vuldb.com/?id.295574 · Note
• https://cybersecurity-help.cz/vdb/SB2025022119 · Note
• https://twitter.com/vuldb/status/1889766058841743669 · Twitter Post
• https://twitter.com/CVEnew/status/1889761681829666874 · Twitter Post
• https://t.me/cvedetector/17914 · Telegram Post