CVE-2025-5969 HIGH

CVE-2025-5969: D-Link DIR-632 HTTP POST Request biurl_grou FUN_00425fd8 stack-based overflow

Vendor D-Link
Product DIR-632
Weakness CWE-121
Published June 10, 2025
Last update June 10, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability has been found in D-Link DIR-632 FW103B08 and classified as critical. Affected by this vulnerability is the function FUN_00425fd8 of the file /biurl_grou of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Key dates

02Disclosure timeline

June 10, 2025 CVE published
June 10, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-4501 code-projects Album Management System Search Albums searchalbum stack-based overflow CVE-2025-14936 NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-3259 Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow CVE-2025-3483 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2010-20045 FileWrangler <= 5.30 Stack Buffer Overflow