Stack Buffer Overflow in D-Link DIR-878A1 Router Firmware
CVE-2025-60674

6.8MEDIUM

Key Information:

Vendor

D-Link
Status
DIR-878A1 Router
Vendor
CVE Published:
13 November 2025

What is CVE-2025-60674?

A stack buffer overflow vulnerability is present in the D-Link DIR-878A1 router due to improper handling of the 'Serial Number' field from USB devices. The rc binary's USB storage handling module reads this field into a 64-byte stack buffer using sscanf, while fgets can read up to 127 bytes, leading to a potential stack overflow condition. An attacker with physical access to the device or control over a connected USB device could exploit this vulnerability to execute arbitrary code on the router, posing significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://d-link.com
https://www.dlink.com/en/security-bulletin/
https://www.dlink.com/en

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.