Listen to this Post
How CVE-2025-7910 Works
The CVE-2025-7910 vulnerability exists in D-Link DIR-513 firmware version 1.10’s Boa webserver component. The flaw occurs in the `/goform/formSetWanNonLogin` endpoint when processing the `curTime` parameter via the `sprintf` function. Attackers can craft a malicious HTTP request with an overly long `curTime` value, triggering a stack-based buffer overflow. Since the device lacks proper bounds checking, this allows remote code execution with webserver privileges. The vulnerability is particularly dangerous as it affects end-of-life devices that no longer receive security patches.
DailyCVE Form
Platform: D-Link DIR-513
Version: 1.10
Vulnerability: Buffer Overflow
Severity: Critical
Date: 07/25/2025
Prediction: No patch expected
What Undercode Say
$ curl -X POST http://[bash]/goform/formSetWanNonLogin -d "curTime=$(python -c 'print("A"500)')"
$ gdb -q boa
(gdb) run -c /etc/boa.conf
(gdb) x/20x $esp
How Exploit
1. Craft malicious HTTP POST
2. Overflow curTime parameter
3. Overwrite return address
4. Execute shellcode
Protection from this CVE
1. Replace outdated hardware
2. Network segmentation
3. Disable WAN access
Impact
1. Remote code execution
2. Device compromise
3. Network infiltration
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
