{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-70245", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-03-12T21:07:56.466Z", "dateReserved": "2026-01-09T00:00:00.000Z", "datePublished": "2026-03-12T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-12T19:04:26.957Z"}, "descriptions": [{"lang": "en", "value": "Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://www.dlink.com/en/security-bulletin/"}, {"url": "https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513"}, {"url": "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70245"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-70245", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-12T20:58:59.759144Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T21:07:56.466Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-70245", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-12T20:58:59.759144Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-12T20:59:01.866Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://www.dlink.com/en/security-bulletin/"}, {"url": "https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513"}, {"url": "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70245"}], "descriptions": [{"lang": "en", "value": "Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-03-12T19:04:26.957Z"}}}, "cveMetadata": {"cveId": "CVE-2025-70245", "state": "PUBLISHED", "dateUpdated": "2026-03-12T21:07:56.466Z", "dateReserved": "2026-01-09T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-03-12T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dlink:dir-513_firmware:1.10:*:*:*:*:*:*:*", "matchCriteriaId": "3DF100F1-CDF4-4B41-B19F-D576B72DC3CD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dlink:dir-513:-:*:*:*:*:*:*:*", "matchCriteriaId": "0BA55B8A-4781-4004-B936-0F212C1A6316", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode."}, {"lang": "es", "value": "Vulnerabilidad de desbordamiento de b\u00fafer de pila en D-Link DIR-513 v1.10 a trav\u00e9s del par\u00e1metro curTime a goform/formSetWizardSelectMode."}], "id": "CVE-2025-70245", "lastModified": "2026-03-13T19:53:53.807", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2026-03-12T19:16:15.803", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70245"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.dlink.com/en/security-bulletin/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-121"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.10"}}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "dir-513", "vendor": "d-link"}], "analysis": {"en": {"generated_at": "2026-03-18T16:25:03.086944+00:00", "value": {"mitigation_remediation": ["Apply the latest firmware update from D\u2011Link that addresses the buffer overflow vulnerability.", "If no update is available, restrict or block external access to the |goform/formSetWizardSelectMode| endpoint using firewall or ACLs.", "Disable remote management features on the router until a security fix is released.", "Monitor router logs for suspicious or malformed requests and review security events regularly."], "summary": {"action": "Patch", "impact": "Stack Buffer Overflow"}, "threat_synthesis": {"affected_systems": "Affected devices are D\u2011Link DIR\u2011513 routers running firmware version 1.10. The common platform enumeration strings reference only this model and firmware build; no other versions are listed as vulnerable based on the available data.", "description_and_impact": "The vulnerability is a stack buffer overflow in the D\u2011Link DIR\u2011513 firmware version 1.10, triggered by the curTime parameter sent to the goform/formSetWizardSelectMode endpoint. As a result of the out\u2011of\u2011bounds write (CWE\u2011121) and related buffer over\u2011read/write (CWE\u2011787), the stack can be corrupted; the description does not explicitly state the exact outcome, but such an overflow may allow an attacker to execute arbitrary code, therefore this is an inferred potential impact.", "risk_and_exploitability": "The CVSS score of 7.5 indicates high severity. The EPSS score of less than 1\u202f% suggests a low probability that the flaw has already been exploited in the wild. This vulnerability is not included in the CISA KEV catalog. The information suggests the issue is reachable via the router\u2019s web interface; it is inferred that an attacker can contact the goform/formSetWizardSelectMode endpoint remotely to trigger the overflow. The CVE description does not specify whether authentication is required, but it is inferred that administrative access may be necessary, though this is not confirmed by the provided data."}}}}, "created": "2026-03-13T09:53:54.033915+00:00", "title": "Stack Buffer Overflow in D-Link DIR-513 v1.10 via curTime Parameter", "updated": "2026-03-20T15:36:34.976897+00:00", "vendors": ["d-link", "d-link$PRODUCT$dir-513"]}