CVE-2025-5912

A vulnerability was found in D-Link DIR-632 FW103B08. It has been declared as critical. This vulnerability affects the function do_file of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dlink:dir-632_firmware:103b08:*:*:*:*:*:*:*
cpe:2.3:h:dlink:dir-632:-:*:*:*:*:*:*:*

History

16 Jun 2025, 16:52

Type Values Removed Values Added
CPE cpe:2.3:h:dlink:dir-632:-:*:*:*:*:*:*:*
cpe:2.3:o:dlink:dir-632_firmware:103b08:*:*:*:*:*:*:*
References () https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink#poc - () https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?submit.592307 - () https://vuldb.com/?submit.592307 - Third Party Advisory, VDB Entry
References () https://www.dlink.com/ - () https://www.dlink.com/ - Product
References () https://vuldb.com/?ctiid.311686 - () https://vuldb.com/?ctiid.311686 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.311686 - () https://vuldb.com/?id.311686 - Third Party Advisory, VDB Entry
References () https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink - () https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink - Exploit, Third Party Advisory
First Time Dlink dir-632
Dlink dir-632 Firmware
Dlink

10 Jun 2025, 13:15

Type Values Removed Values Added
CWE CWE-121
CWE-119
CVSS v2 : unknown
v3 : 8.8
v2 : unknown
v3 : unknown

10 Jun 2025, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-10 04:15

Updated : 2025-06-16 16:52


NVD link : CVE-2025-5912

Mitre link : CVE-2025-5912


JSON object : View

Products Affected

dlink

  • dir-632_firmware
  • dir-632
CWE

No CWE.