CVE-2025-6882

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-120

Affected software

Vendor	Product	Versions
D-Link	DIR-513	1.0

References

https://vuldb.com/?ctiid.314361Permissions Required, VDB Entry
https://vuldb.com/?id.314361Third Party Advisory, VDB Entry
https://vuldb.com/?submit.603693Third Party Advisory, VDB Entry
https://www.dlink.com/Product
https://vuldb.com/?submit.603693Third Party Advisory, VDB Entry

Timeline

Published: Jun 30, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-68820In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_in CVE-2025-68821In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: alloc CVE-2025-688227.8In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The CVE-2025-688235.5In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such CVE-2025-688257.5HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and i CVE-2025-68836.3A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the fil CVE-2025-688335.3HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access t CVE-2025-688347.5Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-s CVE-2025-688357.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matiskiba Ravpage ravpage allows Refle CVE-2025-688367.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markbeljaars Table of Contents Creator CVE-2025-688376.5Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticke CVE-2025-688387.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in expresstechsoftware MemberPress Discor