CVE-2025-8168: dlink dir-513 firmware

csirt@kutim:~/threat-intel/cve/CVE-2025-8168

CVSS 9.8 · Critical EPSS 1,6%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada dlink dir-513 firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function websAspInit of the file /goform/formSetWanPPPoE. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Rincian

Terbit di NVD: 25 Juli 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-787: Out-of-bounds Write
EPSS (30 hari): 1,6% peluang dieksploitasi; lebih tinggi dari 75,6% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
dlink	dir-513 firmware	Versi 1.10

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/InfiniteLin/Lin-s-CVEdb/blob/main/DIR-513/formSetWanL2TP.md exploit · advisory pihak ketiga
https://vuldb.com/?id.317582 advisory pihak ketiga · vdb entry
https://vuldb.com/?submit.620816 advisory pihak ketiga · vdb entry
https://vuldb.com/?ctiid.317582 permissions required · vdb entry
https://www.dlink.com/ product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.