CVE-2025-61577: High severity D-Link DIR-816 vulnerability

Published Oct 9, 2025

Updated

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected Software

3 affected components

D-Link DIR-816

All of the following

Dlink Dir-816 Firmware=1.10cnb05

Dlink DIR-816=a2

Event History

Oct 9, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-61577?

CVE-2025-61577 has been classified with a high severity due to its potential for causing Denial of Service (DoS).

How does CVE-2025-61577 affect my D-Link DIR-816 device?

CVE-2025-61577 allows attackers to exploit a stack overflow vulnerability, potentially disrupting the device's normal operation and causing a DoS.

How do I fix CVE-2025-61577?

To mitigate CVE-2025-61577, ensure your D-Link DIR-816 firmware is updated to the latest version provided by D-Link.

What actions should I take if I am vulnerable to CVE-2025-61577?

If vulnerable to CVE-2025-61577, it is recommended to limit external access to your device and apply the firmware update immediately.

Can CVE-2025-61577 be exploited remotely?

Yes, CVE-2025-61577 can potentially be exploited remotely if the D-Link DIR-816 is accessible over the internet.