CVE-2025-70223
Published: 04 March 2026
Description
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork.
Mitigating Controls (NIST 800-53 r5)AI
Directly requires timely remediation of the stack buffer overflow flaw via firmware patching as advised in vendor bulletins.
Mandates input validation at entry points like the curTime parameter in goform/formAdvNetwork to block malformed data causing overflow.
Deploys memory safeguards like stack canaries and DEP to prevent unauthorized code execution from buffer overflow exploitation.
Security SummaryAI
CVE-2025-70223 is a stack buffer overflow vulnerability (CWE-121) affecting the D-Link DIR-513 router in version 1.10. The issue arises in the handling of the curTime parameter sent to the goform/formAdvNetwork endpoint, which can lead to overflow conditions when processing malformed input. Published on 2026-03-04, it carries a CVSS v3.1 base score of 9.8, indicating critical severity due to its high impact on confidentiality, integrity, and availability.
Remote attackers can exploit this vulnerability over the network with low complexity, requiring no authentication, privileges, or user interaction (AV:N/AC:L/PR:N/UI:N). Successful exploitation enables arbitrary code execution, potentially granting full control over the affected device, including data exfiltration, modification of configurations, or use as a pivot point in further attacks.
Mitigation details and advisories are available through vendor resources, including the D-Link security bulletin at https://www.dlink.com/en/security-bulletin/, product support page at https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513, and a GitHub CVE report at https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70223. Security practitioners should consult these for patch availability or workarounds specific to the DIR-513.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability is a remotely exploitable stack buffer overflow in a public-facing web endpoint (goform/formAdvNetwork) on the D-Link DIR-513 router, requiring no authentication and enabling arbitrary code execution, directly mapping to T1190: Exploit Public-Facing Application.