CVE-2025-8184: high-severity vulnerability in D-Link DIR-513
D-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
26Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 15%
A vulnerability was found in D-Link DIR-513 up to 1.10 and classified as critical. This issue affects the function formSetWanL2TPcallback of the file /goform/formSetWanL2TPtriggers of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
D-Link · DIR-513Related CVEs — D-Link DIR-513
In the same product, most dangerous first.
CVE-2025-8159HIGHD-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflowEPSS 20.6%CVE-2025-7945HIGHD-Link DIR-513 formSetWanDhcpplus buffer overflowEPSS 7.1%CVE-2026-4465MEDIUMD-Link DIR-513 formSysCmd os command injectionEPSS 3.6%CVE-2025-10792HIGHD-Link DIR-513 formWPS buffer overflowEPSS 3.3%CVE-2026-6012HIGHD-Link DIR-513 POST Request formSetPassword buffer overflowEPSS 2.8%CVE-2025-8168HIGHD-Link DIR-513 formSetWanPPPoE websAspInit buffer overflowEPSS 2.2%