CVE-2025-13188

Critical

Published: 14/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

D-Link DIR-816L version 2_06_b09_beta contains a stack-based buffer overflow vulnerability in the function authenticationcgi_main of the file /authentication.cgi. Manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation is possible, and the exploit is public. This vulnerability only affects products that are no longer supported by the maintainer.

Risk Assessment

An attacker can remotely exploit the vulnerability to execute code or cause a denial of service, potentially leading to full compromise.

Recommendation

It is recommended to immediately disconnect the device from the network or replace it with a newer model, as the vendor does not provide patches.

Original NVD description (English source)

A vulnerability was detected in D-Link DIR-816L 2_06_b09_beta. Affected by this vulnerability is the function authenticationcgi_main of the file /authentication.cgi. Performing manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.