CVE-2025-13191

CWE-119 — Buffer OverflowCWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
7.4HIGH
EPSS
0.1%
top 75.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
D-link Dir-816lDlink Dir-816l Firmware
Timeline
PublishedNov 15

Description

A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5d-link/dir-816l2_06_b09_beta

🔴Vulnerability Details

2
CVEList
D-Link DIR-816L soap.cgi soapcgi_main stack-based overflow↗2025-11-15
▶
GHSA
GHSA-fj3w-7rxg-jxhm: A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta↗2025-11-15
▶
CVE-2025-13191 (HIGH CVSS 7.4) | A vulnerability was determined in D | cvebase.io