CVE-2025-70230
Published: 05 March 2026
Description
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.
Mitigating Controls (NIST 800-53 r5)AI
Validating the length and format of the curTime parameter directly prevents the stack buffer overflow in the goform/formSetDDNS endpoint of the D-Link DIR-513.
Implementing stack canaries, address space layout randomization, and non-executable stack protections prevents exploitation of the stack buffer overflow leading to code execution.
Applying vendor firmware updates that remediate the specific stack buffer overflow flaw comprehensively mitigates CVE-2025-70230.
Security SummaryAI
CVE-2025-70230 is a stack buffer overflow vulnerability (CWE-121) in D-Link DIR-513 router version 1.10. The flaw occurs via the curTime parameter sent to the goform/formSetDDNS endpoint, potentially leading to memory corruption when processing oversized input.
The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is exploitable remotely over the network by unauthenticated attackers with low complexity and no user interaction required. Successful exploitation could result in high impacts to confidentiality, integrity, and availability, such as arbitrary code execution or system crashes.
Vendor advisories and support resources for mitigation are referenced at https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70230, https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513, and https://www.dlink.com/en/security-bulletin/. Security practitioners should consult these for firmware updates or workarounds specific to the DIR-513.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack buffer overflow in public-facing router web endpoint (goform/formSetDDNS) enables unauthenticated remote code execution, directly mapping to T1190: Exploit Public-Facing Application.