CVE-2025-60679: Buffer Overflow
A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2FWv1.10CNB05R1B011D88210.img in the upload.cgi module, which handles firmware version information. The vulnerability occurs because /proc/version is read into a 512-byte buffer and then concatenated using sprintf() into another 512-byte buffer containing a 29-byte constant. Input exceeding 481 bytes triggers a stack buffer overflow, allowing an attacker who can control /proc/version content to potentially execute arbitrary code on the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60679?
CVE-2025-60679 is classified as high severity due to the potential for remote code execution resulting from the buffer overflow.
How do I fix CVE-2025-60679?
To mitigate CVE-2025-60679, update the D-Link DIR-816A2 router firmware to the latest version provided by D-Link.
What are the potential impacts of CVE-2025-60679?
Exploitation of CVE-2025-60679 may allow an attacker to execute arbitrary code leading to full system compromise.
Which devices are affected by CVE-2025-60679?
CVE-2025-60679 affects the D-Link DIR-816A2 router with specific firmware versions.
Is CVE-2025-60679 actively exploited in the wild?
While there is no current evidence of active exploitation, the vulnerability presents a significant risk until patched.