PT-2025-7103 · D Link · D-Link Dir-853

Published 2025-02-07 · Updated 2025-02-15 · CVE-2025-25745

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07

Description: A stack-based buffer overflow issue was discovered via the Password parameter in the SetQuickVPNSettings module. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For D-Link DIR-853 A1 version FW1.20B07, consider restricting access to the SetQuickVPNSettings module until a patch is available. As a temporary workaround, avoid using the Password parameter in the affected module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-01761

CVE-2025-25745

Affected Products

D-Link Dir-853

References · 7

• 🔥 https://dear-sunshine-ba5.notion.site/D-Link-DIR-853-2-1812386a664480ea82a7f8321d967187 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-25745 · Security Note
• https://osv.dev/vulnerability/CVE-2025-25745 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01761 · Security Note
• https://vuldb.com/?id.295893 · Note
• https://twitter.com/CVEnew/status/1890426120530538888 · Twitter Post
• https://twitter.com/cybercronai/status/1890755578294587427 · Twitter Post