CVE-2025-7910: D-Link DIR-513 Boa Webserver formSetWanNonLogin sprintf stack-based overflow
A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function sprintf of the file /goform/formSetWanNonLogin of the component Boa Webserver. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7910?
CVE-2025-7910 is classified as a critical vulnerability.
How does CVE-2025-7910 affect the D-Link DIR-513?
CVE-2025-7910 allows for stack-based buffer overflow via the sprintf function in the Boa Webserver.
What component is specifically vulnerable in CVE-2025-7910?
The vulnerability exists in the Boa Webserver component of the D-Link DIR-513.
Can CVE-2025-7910 be exploited remotely?
Yes, CVE-2025-7910 can be exploited remotely due to its nature of handling inputs in the webserver.
What is the potential impact of exploiting CVE-2025-7910?
Exploiting CVE-2025-7910 may allow an attacker to execute arbitrary code on the affected device.