CVE-2025-5623: D-Link DIR-816 qosClassifier stack-based overflow
A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dipaddress/sipaddress leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5623?
CVE-2025-5623 has been classified as a critical vulnerability.
What devices are affected by CVE-2025-5623?
The D-Link DIR-816 is affected by CVE-2025-5623.
How does CVE-2025-5623 exploit occur?
CVE-2025-5623 exploits the function qosClassifier, leading to a stack-based buffer overflow via manipulated dip_address/sip_address arguments.
What are the potential impacts of CVE-2025-5623?
Exploitation of CVE-2025-5623 can lead to remote code execution and unauthorized access.
How can I mitigate CVE-2025-5623?
To mitigate CVE-2025-5623, update the D-Link DIR-816 firmware to the latest version provided by the vendor.