CVE-2025-7909: D-Link DIR-513 Boa Webserver formLanSetupRouterSettings sprintf stack-based overflow
A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. Affected by this issue is the function sprintf of the file /goform/formLanSetupRouterSettings of the component Boa Webserver. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7909?
CVE-2025-7909 has been rated as critical due to the potential for a stack-based buffer overflow.
How do I fix CVE-2025-7909?
To fix CVE-2025-7909, update the D-Link DIR-513 router firmware to the latest version provided by D-Link.
Which devices are affected by CVE-2025-7909?
CVE-2025-7909 affects the D-Link DIR-513 router and the D-Link Boa Webserver.
What kind of attack does CVE-2025-7909 facilitate?
CVE-2025-7909 facilitates attacks that exploit a stack-based buffer overflow to potentially execute arbitrary code.
Is CVE-2025-7909 a remote vulnerability?
Yes, CVE-2025-7909 can be exploited remotely through the affected webserver components.