Skip to content
OpenAdvisories
Critical WID-SEC-2025-1412 8 CVEs

D-LINK Router DIR-815, DIR-815 und DIR-867: Mehrere Schwachstellen

Published Jun 26, 2025 · Updated Jun 26, 2025 · de-DE

Vendor: D-Link Product: Router

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen D-LINK Routern ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder Daten zu manipulieren.

Product

Router der Firma D-LINK enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 8

  • Critical 9.8
    CVE-2025-5622

    D-Link DIR-816 wirelessApcli_5g stack-based overflow

    A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file /goform/wirelessApcli_5g. The manipulation of the argument apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g le…

    D-Link DIR-816 Network devices
  • Critical 9.8
    CVE-2025-5623 EPSS 20%

    D-Link DIR-816 qosClassifier stack-based overflow

    A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to stack-based buffer overflow…

    D-Link DIR-816 Network devices
  • Critical 9.8
    CVE-2025-5624

    D-Link DIR-816 QoSPortSetup stack-based overflow

    A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file /goform/QoSPortSetup. The manipulation of the argument port0_group/port0_remarker/ssid0_group/ssid0_remar…

    D-Link DIR-816 Network devices
  • Critical 9.8
    CVE-2025-5630

    D-Link DIR-816 form2lansetup.cgi stack-based overflow

    A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be i…

    D-Link DIR-816 Network devices
  • High 8.8
    CVE-2025-6328

    D-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow

    A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exp…

    D-Link DIR-815 Network devices
  • High 8.8
    CVE-2025-6334

    D-Link DIR-867 Query String strncpy stack-based overflow

    A vulnerability has been found in D-Link DIR-867 1.0 and classified as critical. This vulnerability affects the function strncpy of the component Query String Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely…

    D-Link DIR-867 Network devices
  • High 7.3
    CVE-2025-5620

    D-Link DIR-816 setipsec_config os command injection

    A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setipsec_config of the file /goform/setipsec_config. The manipulation of the argument localIP/remoteIP leads to os command injection. It is poss…

    D-Link DIR-816 Network devices
  • High 7.3
    CVE-2025-5621

    D-Link DIR-816 qosClassifier os command injection

    A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to os command…

    D-Link DIR-816 Network devices

Revision history

  1. #1

    Initiale Fassung

References