Remote Buffer Overflow in D-Link Router Products
CVE-2025-7945

8.8HIGH

Key Information:

Vendor

D-Link
Status
DIR-513
Vendor
CVE Published:
22 July 2025

What is CVE-2025-7945?

A remote buffer overflow vulnerability has been identified in the D-Link DIR-513 router, specifically affecting the formSetWanDhcpplus function found in the /goform/formSetWanDhcpplus file. This vulnerability allows an attacker to manipulate the curTime argument, leading to overwrite memory locations. Notably, this issue impacts versions of the DIR-513 that are no longer supported by D-Link, making them especially vulnerable to exploitation. Security measures should be taken promptly to mitigate risks associated with this vulnerability.

References

https://github.com/LYN1ng/D-linkdir513/blob/main/Dlink_DI...
https://vuldb.com/?ctiid.317086
https://vuldb.com/?id.317086

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-7945 : Remote Buffer Overflow in D-Link Router Products