CVE-2025-61577
published 2025-10-09CVE-2025-61577: D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function. This…
PriorityP347high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
5.34%
91.7th percentile
D-Link DIR-816A2_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir_setWanWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dlink | dir-816_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET WEB_SPECIFIC_APPS D-Link dir_setWanWifi statuscheckpppoeuser Parameter Buffer Overflow Attempt (CVE-2025-61577)
suricata·2025-10-09·CVSS 7.5
CVE-2025-61577 [HIGH] ET WEB_SPECIFIC_APPS D-Link dir_setWanWifi statuscheckpppoeuser Parameter Buffer Overflow Attempt (CVE-2025-61577)
ET WEB_SPECIFIC_APPS D-Link dir_setWanWifi statuscheckpppoeuser Parameter Buffer Overflow Attempt (CVE-2025-61577)
Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS D-Link dir_setWanWifi statuscheckpppoeuser Parameter Buffer Overflow Attempt (CVE-2025-61577)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:22; content:"/goform/dir_setWanWifi"; fast_pattern; http.request_body; content:"statuscheckpppoeuser|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:url,github.com/peris-navince/founded-0-days/blob/main/Dlink/816/dir_setWanWifi/1.md; reference:cve,2025-61577; classtype:web-application-attack; sid:2065122; rev:1; metadata:affected_product D_Link, attack_target Networking_Equipment, tls_state plaintext, created_at 2025_10_09, cve CVE_2025_61577,
No public exploits indexed.
No writeups or analysis indexed.
2025-10-09
Published