Stack-based Buffer Overflow in D-Link DIR-853 A1
CVE-2025-25745

8.8HIGH

Key Information:

Vendor
D-Link
Status
DIR-853 A1
Vendor
CVE Published:
14 February 2025

Summary

The D-Link DIR-853 A1 with Firmware 1.20B07 is susceptible to a stack-based buffer overflow vulnerability in the SetQuickVPNSettings module, specifically triggered by the Password parameter. This weakness may allow an attacker to execute arbitrary code by exploiting this flaw, potentially compromising the device's integrity and the security of connected networks.

References

https://dear-sunshine-ba5.notion.site/D-Link-DIR-853-2-18...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.