CVE-2025-70244
Published: 10 March 2026
Summary
CVE-2025-70244 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Dlink Dir-513 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 13.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Threat & Defense at a Glance
Threat & Defense Details
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stack buffer overflow in unauthenticated web interface endpoint enables remote exploitation of public-facing application for DoS impact.
NVD Description
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the webPage parameter to goform/formWlanSetup.
Deeper analysisAI
CVE-2025-70244 is a stack buffer overflow vulnerability (CWE-121) affecting the D-Link DIR-513 router in version 1.10. The flaw resides in the handling of the webPage parameter sent to the goform/formWlanSetup endpoint, which can be triggered over the network via the device's web interface.
A remote unauthenticated attacker can exploit this vulnerability with low complexity and no user interaction required, as indicated by its CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Successful exploitation leads to a denial-of-service condition through high-impact availability disruption, such as device crashes or reboots, without affecting confidentiality or integrity.
Mitigation details and related advisories are available in the following references: a GitHub repository at https://github.com/akuma-QAQ/CVEreport/tree/main/D-link/CVE-2025-70244 documenting the issue; the D-Link DIR-513 product support page at https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513; and D-Link's security bulletin page at https://www.dlink.com/en/security-bulletin/. Security practitioners should consult these for patch availability or workarounds specific to the DIR-513.
Details
- CWE(s)