CVE-2025-13190
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
D-Link DIR-816L 2_06_b09_beta is affected by a stack-based buffer overflow in the scandir_main function of /portal/__ajax_exporer.sgi via manipulation of the en argument. The attack can be performed remotely and a public exploit exists.
Risk Assessment
A remote attacker could use the public exploit to trigger a buffer overflow and potentially execute code on a device that is no longer supported by the vendor.
Recommendation
Replace the device with a newer model or apply compensating controls (e.g., restrict access to the management interface), as the product is end-of-life.
Other vulnerabilities in D-Link DIR-816L
See all- CVE-2025-13188Critical
D-Link DIR-816L version 2_06_b09_beta contains a stack-based buffer overflow vulnerability in the function authenticationcgi_main of the file /authentication.cgi. Manipulation of the argument Password results in stack-based buffer overflow. Remote exploitation is possible, and the exploit is public. This vulnerability only affects products that are no longer supported by the maintainer.
- CVE-2025-9727Medium
A weakness was identified in D-Link DIR-816L version 206b01 in the soapcgi_main function of /soap.cgi. Manipulating the service argument leads to OS command injection. The attack can be performed remotely and the exploit is publicly available.
- CVE-2025-13191High
A vulnerability was found in D-Link DIR-816L version 2_06_b09_beta in the soapcgi_main function of /soap.cgi, causing a stack-based buffer overflow. The attack can be carried out remotely, and the exploit has been publicly disclosed. This vulnerability only affects products no longer supported by the maintainer.
- CVE-2025-13189High
A vulnerability was found in D-Link DIR-816L version 2_06_b09_beta in the genacgi_main function of gena.cgi. Manipulation of the SERVER_ID/HTTP_SID arguments leads to a stack-based buffer overflow. The attack can be carried out remotely, the exploit has been publicly disclosed, and the vulnerability only affects products no longer supported by the maintainer.
Original NVD description (English source)
A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS