D-Link DIR-513 Buffer Overflow Vulnerability (CNVD-2025-16670)

The D-Link DIR-513 is a wireless router device manufactured by D-Link. A buffer overflow vulnerability exists in the D-Link DIR-513 version 1.0, which originates from improper handling of the curTime parameter in the sprintf function of the /goform/formLanSetupRouterSettings file in the Boa...

D-Link DIR-513 Buffer Overflow Vulnerability

The D-Link DIR-513 is a wireless router device manufactured by D-Link. The D-Link DIR-513 version 1.10 suffers from a buffer overflow vulnerability that originates from improper handling of the curTime parameter in the sprintf function in the Boa Webserver component/goform/formSetWanNonLogin file...

D-Link DIR-816L Router Code Execution

The vulnerability of the lxmldbcsystem function /htdocs/cgibin of the D-Link DIR-816L router’s software is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

D-LINK DIR-818LW Router System Time Arbitrary Command Execution

The vulnerability of the System Time module in the D-LINK DIR-818LW router’s software management web interface is related to the lack of measures taken to neutralize special elements during the processing of the NTP Server parameter. Exploiting this vulnerability allows a remote attacker to execu...

D-Link DIR-816 Router DoS

The vulnerability of the qosClassifier function /goform/qosClassifier of D-Link DIR-816 router software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending ...

CVE-2025-7910

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function sprintf of the file /goform/formSetWanNonLogin of the component Boa Webserver. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the atta...

CVE-2025-7945

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

CVE-2025-7945: Buffer Copy without Checking Size of Input

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

PT-2025-30844

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.0 Description A critical issue exists in the HTTP POST Request Handler component, specifically within the formLanguageChange function of the /goform/formLanguageChange file. Manipulation of the curTime argument can lea...

CVE-2025-7945 D-Link DIR-513 formSetWanDhcpplus buffer overflow

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

CVE-2025-7945

CVE-2025-7945 affects the D-Link DIR-513 up to 20190831. The vulnerability is a buffer overflow in the function formSetWanDhcpplus in the file /goform/formSetWanDhcpplus , triggered by manipulating the curTime argument. It can be exploited remotely and impacts devices that are no longer supported...

CVE-2025-7932

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7932

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7836

A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbcsystem of the file /htdocs/cgibin of the component Environment Variable Handler. The manipulation leads to command injection. The attack can be launche...

CVE-2025-7932 D-Link DIR‑817L ssdpcgi lxmldbc_system command injection

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7932

D-Link DIR-817L is affected by a remote command-injection in the lxmldbc_system function of ssdpcgi, per multiple sources. Versions up to 1.04B01 are impacted. The vulnerability arises from improper filtering of constructed command characters. The exploit has been publicly disclosed. Several repo...

CVE-2025-7932 D-Link DIR‑817L ssdpcgi lxmldbc_system command injection

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

PT-2025-30933 · D Link · Dir-513

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 version 1.10 Description: A critical issue exists in the websAspInit function of the /goform/formSetWanPPPoE file. Manipulation of the curTime argument can lead to a buffer overflow. This issue can be exploited remotely. The...

PT-2025-30317

Name of the Vulnerable Software and Affected Versions D-Link DIR‑817L versions up to 1.04B01 Description A critical issue exists in D-Link DIR‑817L. The lxmldbc system function within the ssdpcgi file is susceptible to command injection, allowing for remote attacks. The exploit for this issue has...

D-Link DIR-817L 命令注入漏洞

D-Link DIR-817L is a home-grade dual-band wireless router from D-Link that supports IEEE 802.11ac standard with dual-band concurrency 2.4GHz/5GHz and a maximum wireless transmission rate of 750Mbps. A command injection vulnerability exists in the D-Link DIR-817L, which stems from the failure of t...