CVE-2025-60555

The D-Link DIR600L wireless router, specifically firmware version FW116WWb01 , is vulnerable to a stack-based buffer overflow . This issue originates from the formSetWizardSelectMode function, where the software fails to properly validate the length of input data provided via the curTime paramete...

CVE-2025-60572

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...

CVE-2025-60568

The D-Link DIR600L wireless router (specifically Ax FW116WWb01 firmware) is vulnerable to a buffer overflow in the formAdvFirewall function. The root cause is the curTime parameter, where the software fails to correctly validate the length of input data before copying it into buffers. A remote at...

PT-2025-43638

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax firmware version FW116WWb01 contains a buffer overflow. This occurs through the curTime parameter within the formSetEnableWizard function. Recommendations Update to a newer...

CVE-2025-60570

The D-Link DIR600L wireless router (Ax FW116WWb01) is vulnerable to a buffer overflow in the formLogDnsquery function. The root cause is a failure to properly validate the length of input data when processing the curTime parameter, specifically by copying buffer data without size checks. A malici...

CVE-2025-60332

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2025-60331

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-60331

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-60344

A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...

CVE-2025-60331

The D-Link DIR-823G A1 wireless router (version v1.0.2B05 ) contains a buffer overflow vulnerability in the FillMacCloneMac parameter of the /EXCU_SHELL API endpoint. The root cause is a failure to properly validate the length of the input data. A remote attacker can exploit this by providing cra...

D-Link DIR-820L Access Control Error Vulnerability

The D-Link DIR-820L is a wireless router device from D-Link. An improper access control vulnerability exists in the D-Link DIR-820L version 1.06B02, which stems from the administrator password setup function not properly validating the authentication mechanism. An attacker can exploit this...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A security vulnerability exists in D-Link DIR-823G A1 v1.0.2B05, which originates from a null pointer dereference in the SetWLanRadioSettings function. An attacker can exploit this vulnerability to cause a DoS...

EUVD-2025-35579

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-60332: NULL Pointer Dereference

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2025-60331: Stack-based Buffer Overflow

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-35363

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2025-43331

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G A1 version 1.0.2B05 Description A flaw exists in the SetWLanRadioSettings function that can lead to a Denial of Service DoS. This occurs due to a NULL pointer dereference triggered by a specially crafted HTTP request...

CVE-2025-60332

A NULL pointer dereference in the SetWLanRadioSettings function of D-Link DIR-823G A1 v1.0.2B05 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2025-43330

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G A1 version 1.0.2B05 Description The D-Link DIR-823G A1 device version 1.0.2B05 contains a buffer overflow in the FillMacCloneMac parameter of the /EXCU SHELL API endpoint. A crafted input to this parameter can lead to a Denial ...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from a buffer overflow vulnerability that stems from the FillMacCloneMac parameter failing to properly validate the length size of input data, which can be exploited by an attacker to cause a denial of...