CVE-2025-5630
Last modified
CVE-2025-5630 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. EPSS estimates a 2.08% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dlink | Dir-816 Firmware | 1.10cnb05 |
References
- https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_54/54.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.311116Permissions Required
- https://vuldb.com/?id.311116Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.589779Third Party Advisory, VDB Entry
- https://www.dlink.com/Product
- https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_54/54.mdExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-5630?
How severe is CVE-2025-5630?
How do I fix CVE-2025-5630?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-5628A vulnerability, which was classified as problematic, has be…5.4
- CVE-2025-56280code-projects Food Ordering Review System 1.0 is vulnerable …5.4
- CVE-2025-56289code-projects Document Management System 1.0 has a Cross Sit…5.4
- CVE-2025-5629A vulnerability, which was classified as critical, was found…9.8
- CVE-2025-56293code-projects Human Resource Integrated System 1.0 is vulner…5.4
- CVE-2025-56295code-projects Computer Laboratory System 1.0 has a file uplo…7.3
- CVE-2025-56301An issue was discovered in Chipsalliance Rocket-Chip commit …7.5
- CVE-2025-56304Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 …6.1
- CVE-2025-5631A vulnerability was found in code-projects/anirbandutta9 Con…9.8
- CVE-2025-56311In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware …6.5
- CVE-2025-56313A Reflected Cross-Site Scripting (XSS) vulnerability was dis…6.1
- CVE-2025-56316A SQL injection vulnerability in the content_title parameter…9.8
Are you affected by CVE-2025-5630?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST