ID
VAR-202507-2614
CVE
CVE-2025-8169
TITLE
D-Link Systems, Inc. of DIR-513 Buffer error vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPcallback of the file /goform/formSetWanPPTPpath of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. D-Link Systems, Inc. of DIR-513 The firmware contains buffer error vulnerabilities, classic buffer overflow vulnerabilities, and out-of-bounds write vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The D-Link DIR-513 is a portable wireless router featuring a slim design and ease of use. It supports IEEE 802.11n and 802.11g/b standards and offers a maximum transmission rate of 300Mbps. An attacker could exploit this vulnerability by remotely crafting malicious data to trigger the buffer overflow, potentially executing arbitrary code or causing the device to crash
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | dir-513 | scope: | eq | version: | 1.10 | Trust: 1.0 |
| vendor: | d link | model: | dir-513 | scope: | eq | version: | dir-513 firmware 1.10 | Trust: 0.8 |
| vendor: | d link | model: | dir-513 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dir-513 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dir-513 | scope: | eq | version: | 1.10 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Classic buffer overflow (CWE-120) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-8169 | Trust: 3.2 |
| db: | VULDB | id: | 317583 | Trust: 2.4 |
| db: | JVNDB | id: | JVNDB-2025-010414 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-17351 | Trust: 0.6 |
REFERENCES
| url: | https://vuldb.com/?id.317583 | Trust: 2.4 |
| url: | https://vuldb.com/?submit.620817 | Trust: 2.4 |
| url: | https://github.com/infinitelin/lin-s-cvedb/blob/main/dir-513/formsetwanpppoe.md | Trust: 2.4 |
| url: | https://www.dlink.com/ | Trust: 2.4 |
| url: | https://vuldb.com/?ctiid.317583 | Trust: 1.6 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-8169 | Trust: 0.8 |
SOURCES
| db: | CNVD | id: | CNVD-2025-17351 |
| db: | JVNDB | id: | JVNDB-2025-010414 |
| db: | NVD | id: | CVE-2025-8169 |
LAST UPDATE DATE
2025-08-02T23:18:47.810000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-17351 | date: | 2025-08-01T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010414 | date: | 2025-08-01T02:46:00 |
| db: | NVD | id: | CVE-2025-8169 | date: | 2025-07-31T17:27:55.477 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-17351 | date: | 2025-08-01T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-010414 | date: | 2025-08-01T00:00:00 |
| db: | NVD | id: | CVE-2025-8169 | date: | 2025-07-25T21:15:27.897 |