CVE-2025-25740

The D-Link DIR-853 A1 router (FW1.20B07) is vulnerable to a stack-based buffer overflow in the SetQuickVPNSettings module. The flaw occurs because the prog.cgi script fails to properly validate the length of the input data provided via the PSK parameter . An attacker exploiting this vulnerability...

CVE-2025-25741

The D-Link DIR-853 A1 router, specifically running firmware FW1.20B07 , is vulnerable to a stack-based buffer overflow . This flaw exists within the SetIPv6PppoeSettings module, specifically in the prog.cgi script, caused by the improper handling of the IPv6_PppoePassword parameter. An unauthenti...

CVE-2024-0717

Affects a wide range of D-Link devices (e.g., DAP-1360, DIR-300, DIR-615, DIR-620, DVG-series, Good Line Router v2, and others) with the vulnerability residing in the HTTP GET Request Handler for /devinfo. The underlying issue is improper handling of the area parameter, where input such as notice...

CVE-2025-25742

D-Link DIR-853 A1 firmware FW1.20B07 contains a stack-based buffer overflow in the SetSysEmailSettings module, triggered by the AccountPassword parameter. Affected product: DIR-853; CVE-2025-25742. Impact is high: CVSS v3.1 base score 9.8 (CRITICAL) with network attack, no user interaction requir...

CVE-2025-25743

CVE-2025-25743 affects D-Link DIR-853 A1 (FW1.20B07). A command-injection flaw exists in the SetVirtualServerSettings module due to improper input handling, enabling potential remote code execution. Impact includes confidentiality, integrity, and availability at high levels over network access. A...

CVE-2025-25746

D-Link DIR-853 A1 with firmware FW1.20B07 is affected by a stack-based buffer overflow in the SetWanSettings module, triggered by the Password parameter. The vulnerability affects the DIR-853 A1; details in PT-2025-7104 and CVE-2025-25746 indicate a critical issue (CVSS 9.8). There is no publishe...

CVE-2025-25744

CVE-2025-25744 affects the D-Link DIR-853 A1 with firmware FW1.20B07. The vulnerability, described in the PT-Security entry PT-2025-7102, is a stack-based overflow in the SetDynamicDNSSettings module triggered by the Password parameter, indicating a buffer overflow condition that can be exploited...

CVE-2025-25745

The D-Link DIR-853 A1 wireless router, running firmware version FW1.20B07 , is vulnerable to a stack-based buffer overflow in the SetQuickVPNSettings module. The root cause is the improper validation of the input data length for the Password parameter, specifically within the prog.cgi script. An ...