ID
VAR-202509-1739
CVE
CVE-2025-10779
TITLE
D-Link Corporation of DCS-935L Out-of-bounds write vulnerability in firmware
Trust: 0.8
DESCRIPTION
A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. D-Link Corporation of DCS-935L An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The D-Link DCS-935L is a router manufactured by D-Link, a Chinese company. This vulnerability stems from the failure of the HNAP_AUTH/SOAPAction parameter in the file /HNAP1/ to properly validate the length of input data. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service
Trust: 2.16
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | dlink | model: | dcs-935l | scope: | lte | version: | 1.13.01 | Trust: 1.0 |
| vendor: | d link | model: | dcs-935l | scope: | - | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dcs-935l | scope: | lte | version: | dcs-935l firmware 1.13.01 and earlier | Trust: 0.8 |
| vendor: | d link | model: | dcs-935l | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | d link | model: | dcs-935l | scope: | lte | version: | <=1.13.01 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Stack-based buffer overflow (CWE-121) [ others ] | Trust: 0.8 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-10779 | Trust: 3.2 |
| db: | VULDB | id: | 325135 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2025-015029 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-23077 | Trust: 0.6 |
REFERENCES
| url: | https://github.com/scanleale/iot_sec/blob/main/dcs-935l-1.pdf | Trust: 1.8 |
| url: | https://github.com/scanleale/iot_sec/blob/main/dcs-935l-2.pdf | Trust: 1.8 |
| url: | https://vuldb.com/?id.325135 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.653690 | Trust: 1.8 |
| url: | https://vuldb.com/?submit.653691 | Trust: 1.8 |
| url: | https://www.dlink.com/ | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2025-10779 | Trust: 1.4 |
| url: | https://vuldb.com/?ctiid.325135 | Trust: 1.0 |
SOURCES
| db: | CNVD | id: | CNVD-2025-23077 |
| db: | JVNDB | id: | JVNDB-2025-015029 |
| db: | NVD | id: | CVE-2025-10779 |
LAST UPDATE DATE
2025-10-05T23:34:08.524000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-23077 | date: | 2025-09-30T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-015029 | date: | 2025-10-03T09:13:00 |
| db: | NVD | id: | CVE-2025-10779 | date: | 2025-09-25T20:01:52.330 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-23077 | date: | 2025-09-28T00:00:00 |
| db: | JVNDB | id: | JVNDB-2025-015029 | date: | 2025-10-03T00:00:00 |
| db: | NVD | id: | CVE-2025-10779 | date: | 2025-09-22T04:15:45.437 |