CVE-2025-10792
Published: 22 September 2025
Summary
CVE-2025-10792 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Dlink Dir-513 Firmware. Its CVSS base score is 7.4 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 13.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SA-22 (Unsupported System Components) and SI-10 (Information Input Validation).
Deeper analysis
A buffer overflow vulnerability exists in the D-Link DIR-513 A1FW110 wireless router, specifically within an unknown function of the file /goform/formWPS. The flaw is triggered by improper handling of the webpage argument and is tracked under CWE-119, CWE-120, and CWE-787. The device runs firmware version A1FW110 and is explicitly noted as no longer supported by the vendor.
An attacker with network access and low privileges can send a crafted HTTP request to the formWPS endpoint, causing memory corruption that may result in arbitrary code execution or a denial of service. The CVSS 4.0 score of 7.4 reflects remote attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. A proof-of-concept exploit has been published on GitHub.
No vendor patches are available because the product has reached end-of-life. The public references consist solely of third-party disclosure and PoC material on VulDB and GitHub. The EPSS score remains flat at 0.0295 with no material increase since publication.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-30788
Vulnerability details
A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been…
more
disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow vulnerability in the web interface (/goform/formWPS) of the D-Link DIR-513 router enables remote exploitation of a public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents the buffer overflow in /goform/formWPS by validating and restricting the length and format of the 'webpage' argument to avoid memory corruption.
Mitigates exploitation of the buffer overflow vulnerability through memory protection mechanisms like address space randomization and non-executable memory regions.
Eliminates exposure to this unpatched vulnerability by prohibiting the use of end-of-life unsupported devices such as the D-Link DIR-513 router.