CVE-2025-5621

CVE-2025-5621 describes an OS command injection in the D-Link DIR-816 router, targeting the function qosClassifier in /goform/qosClassifier. The vulnerability arises from manipulating the dip_address/sip_address arguments, enabling remote exploitation and high impact. Reported affected firmware i...

PT-2025-23875 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version 1.10CNB05 Description: A critical vulnerability affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the arguments dip address and sip address leads to a stack-based buffer overflow...