PT-2025-47046

CVE-2025-13191

Published

2025-11-15

Updated

2025-11-20

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions D-Link DIR-816L version 2 06 b09 beta

Description A stack-based buffer overflow exists in the soapcgi main function of the /soap.cgi file. This issue allows for remote exploitation. The exploit has been publicly disclosed. The affected product is no longer supported by the maintainer. The vulnerability stems from improper handling of input data within the soapcgi main function, potentially allowing an attacker to execute arbitrary code remotely.

Recommendations Replace or isolate affected devices.

Exploitability

Exploit

Fix

Impacts

Researchers

Lexpl0It

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-121: Stack-based Buffer Overflow